./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:10:55,264 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:10:55,269 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:10:55,291 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:10:55,292 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:10:55,294 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:10:55,296 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:10:55,298 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:10:55,301 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:10:55,302 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:10:55,303 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:10:55,305 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:10:55,305 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:10:55,309 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:10:55,310 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:10:55,311 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:10:55,312 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:10:55,313 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:10:55,314 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:10:55,317 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:10:55,320 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:10:55,321 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:10:55,322 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:10:55,323 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:10:55,326 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:10:55,329 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:10:55,329 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:10:55,330 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:10:55,331 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:10:55,331 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:10:55,332 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:10:55,332 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:10:55,333 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:10:55,333 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:10:55,334 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:10:55,335 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:10:55,336 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:10:55,336 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:10:55,336 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:10:55,337 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:10:55,337 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:10:55,338 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:10:55,359 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:10:55,360 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:10:55,360 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:10:55,360 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:10:55,361 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:10:55,361 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:10:55,361 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:10:55,361 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:10:55,362 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:10:55,362 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:10:55,362 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:10:55,363 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:10:55,364 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:10:55,364 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:10:55,364 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:10:55,364 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:10:55,364 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:10:55,364 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:10:55,365 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:10:55,365 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:10:55,365 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:10:55,365 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:10:55,365 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:10:55,366 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d44823aac48cec2911f68e219166f3ac1836e56b97e3a905bce4580d699376f2 [2022-02-20 18:10:55,581 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:10:55,596 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:10:55,598 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:10:55,599 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:10:55,600 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:10:55,600 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2022-02-20 18:10:55,650 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/596ee49a4/18e76b0b5fa84b32a4cdf0f55d8558dd/FLAG9d3ecd5ff [2022-02-20 18:10:56,084 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:10:56,093 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2022-02-20 18:10:56,114 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/596ee49a4/18e76b0b5fa84b32a4cdf0f55d8558dd/FLAG9d3ecd5ff [2022-02-20 18:10:56,125 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/596ee49a4/18e76b0b5fa84b32a4cdf0f55d8558dd [2022-02-20 18:10:56,128 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:10:56,128 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:10:56,129 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:10:56,130 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:10:56,132 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:10:56,133 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,133 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@35d956d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56, skipping insertion in model container [2022-02-20 18:10:56,134 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,138 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:10:56,159 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:10:56,438 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2022-02-20 18:10:56,463 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:10:56,469 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:10:56,521 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c[13010,13023] [2022-02-20 18:10:56,545 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:10:56,557 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:10:56,557 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56 WrapperNode [2022-02-20 18:10:56,558 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:10:56,558 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:10:56,559 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:10:56,559 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:10:56,563 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,573 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,597 INFO L137 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 260 [2022-02-20 18:10:56,601 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:10:56,602 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:10:56,602 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:10:56,602 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:10:56,608 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,608 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,616 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,616 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,623 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,629 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,630 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,631 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:10:56,632 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:10:56,632 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:10:56,632 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:10:56,638 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,647 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:10:56,660 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:10:56,670 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:10:56,676 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:10:56,713 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:10:56,713 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:10:56,713 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:10:56,713 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:10:56,714 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:10:56,714 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:10:56,714 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:10:56,714 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:10:56,715 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:10:56,716 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:10:56,716 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:10:56,716 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:10:56,716 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:10:56,716 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:10:56,717 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:10:56,717 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:10:56,793 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:10:56,795 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:10:57,156 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:10:57,162 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:10:57,162 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:10:57,163 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57 BoogieIcfgContainer [2022-02-20 18:10:57,163 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:10:57,165 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:10:57,165 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:10:57,167 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:10:57,179 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:10:56" (1/3) ... [2022-02-20 18:10:57,180 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2e916c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:10:57, skipping insertion in model container [2022-02-20 18:10:57,180 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56" (2/3) ... [2022-02-20 18:10:57,180 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2e916c7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:10:57, skipping insertion in model container [2022-02-20 18:10:57,180 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57" (3/3) ... [2022-02-20 18:10:57,181 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product50.cil.c [2022-02-20 18:10:57,185 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:10:57,185 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:10:57,228 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:10:57,241 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:10:57,242 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:10:57,269 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 65 states have (on average 1.4) internal successors, (91), 73 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:10:57,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-02-20 18:10:57,273 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:57,273 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:57,274 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:57,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:57,278 INFO L85 PathProgramCache]: Analyzing trace with hash -340967460, now seen corresponding path program 1 times [2022-02-20 18:10:57,284 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:57,285 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998296774] [2022-02-20 18:10:57,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:57,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:57,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:57,497 INFO L290 TraceCheckUtils]: 0: Hoare triple {86#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {86#true} is VALID [2022-02-20 18:10:57,501 INFO L290 TraceCheckUtils]: 1: Hoare triple {86#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {86#true} is VALID [2022-02-20 18:10:57,501 INFO L290 TraceCheckUtils]: 2: Hoare triple {86#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {86#true} is VALID [2022-02-20 18:10:57,501 INFO L290 TraceCheckUtils]: 3: Hoare triple {86#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {86#true} is VALID [2022-02-20 18:10:57,502 INFO L290 TraceCheckUtils]: 4: Hoare triple {86#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {86#true} is VALID [2022-02-20 18:10:57,502 INFO L290 TraceCheckUtils]: 5: Hoare triple {86#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {86#true} is VALID [2022-02-20 18:10:57,503 INFO L290 TraceCheckUtils]: 6: Hoare triple {86#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {86#true} is VALID [2022-02-20 18:10:57,503 INFO L290 TraceCheckUtils]: 7: Hoare triple {86#true} assume false; {87#false} is VALID [2022-02-20 18:10:57,504 INFO L272 TraceCheckUtils]: 8: Hoare triple {87#false} call cleanup(); {87#false} is VALID [2022-02-20 18:10:57,504 INFO L290 TraceCheckUtils]: 9: Hoare triple {87#false} havoc ~i~0;havoc ~__cil_tmp2~0; {87#false} is VALID [2022-02-20 18:10:57,505 INFO L272 TraceCheckUtils]: 10: Hoare triple {87#false} call timeShift(); {87#false} is VALID [2022-02-20 18:10:57,505 INFO L290 TraceCheckUtils]: 11: Hoare triple {87#false} assume !(0 != ~pumpRunning~0); {87#false} is VALID [2022-02-20 18:10:57,505 INFO L290 TraceCheckUtils]: 12: Hoare triple {87#false} assume !(0 != ~systemActive~0); {87#false} is VALID [2022-02-20 18:10:57,506 INFO L290 TraceCheckUtils]: 13: Hoare triple {87#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {87#false} is VALID [2022-02-20 18:10:57,506 INFO L290 TraceCheckUtils]: 14: Hoare triple {87#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {87#false} is VALID [2022-02-20 18:10:57,506 INFO L290 TraceCheckUtils]: 15: Hoare triple {87#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {87#false} is VALID [2022-02-20 18:10:57,506 INFO L290 TraceCheckUtils]: 16: Hoare triple {87#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {87#false} is VALID [2022-02-20 18:10:57,507 INFO L290 TraceCheckUtils]: 17: Hoare triple {87#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {87#false} is VALID [2022-02-20 18:10:57,507 INFO L290 TraceCheckUtils]: 18: Hoare triple {87#false} assume !false; {87#false} is VALID [2022-02-20 18:10:57,508 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:57,508 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:57,509 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998296774] [2022-02-20 18:10:57,509 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998296774] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:57,510 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:57,510 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:10:57,511 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2142663779] [2022-02-20 18:10:57,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:57,516 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:10:57,517 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:57,519 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:57,544 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:57,545 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:10:57,545 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:57,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:10:57,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:10:57,567 INFO L87 Difference]: Start difference. First operand has 83 states, 65 states have (on average 1.4) internal successors, (91), 73 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:57,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:57,676 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2022-02-20 18:10:57,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:10:57,676 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:10:57,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:57,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:57,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 217 transitions. [2022-02-20 18:10:57,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:57,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 217 transitions. [2022-02-20 18:10:57,699 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 217 transitions. [2022-02-20 18:10:57,867 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 217 edges. 217 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:57,878 INFO L225 Difference]: With dead ends: 158 [2022-02-20 18:10:57,878 INFO L226 Difference]: Without dead ends: 74 [2022-02-20 18:10:57,881 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:10:57,884 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:57,885 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:10:57,895 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-02-20 18:10:57,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 74. [2022-02-20 18:10:57,906 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:57,906 INFO L82 GeneralOperation]: Start isEquivalent. First operand 74 states. Second operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:57,907 INFO L74 IsIncluded]: Start isIncluded. First operand 74 states. Second operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:57,908 INFO L87 Difference]: Start difference. First operand 74 states. Second operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:57,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:57,912 INFO L93 Difference]: Finished difference Result 74 states and 96 transitions. [2022-02-20 18:10:57,912 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 96 transitions. [2022-02-20 18:10:57,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:57,914 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:57,914 INFO L74 IsIncluded]: Start isIncluded. First operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 74 states. [2022-02-20 18:10:57,915 INFO L87 Difference]: Start difference. First operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Second operand 74 states. [2022-02-20 18:10:57,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:57,922 INFO L93 Difference]: Finished difference Result 74 states and 96 transitions. [2022-02-20 18:10:57,922 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 96 transitions. [2022-02-20 18:10:57,922 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:57,923 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:57,923 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:57,923 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:57,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:57,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 96 transitions. [2022-02-20 18:10:57,927 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 96 transitions. Word has length 19 [2022-02-20 18:10:57,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:57,927 INFO L470 AbstractCegarLoop]: Abstraction has 74 states and 96 transitions. [2022-02-20 18:10:57,929 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:57,930 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 96 transitions. [2022-02-20 18:10:57,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-02-20 18:10:57,932 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:57,932 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:57,932 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:10:57,933 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:57,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:57,933 INFO L85 PathProgramCache]: Analyzing trace with hash -1018100204, now seen corresponding path program 1 times [2022-02-20 18:10:57,933 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:57,933 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448986227] [2022-02-20 18:10:57,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:57,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:57,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:57,987 INFO L290 TraceCheckUtils]: 0: Hoare triple {577#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {577#true} is VALID [2022-02-20 18:10:57,987 INFO L290 TraceCheckUtils]: 1: Hoare triple {577#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {577#true} is VALID [2022-02-20 18:10:57,987 INFO L290 TraceCheckUtils]: 2: Hoare triple {577#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {577#true} is VALID [2022-02-20 18:10:57,987 INFO L290 TraceCheckUtils]: 3: Hoare triple {577#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {577#true} is VALID [2022-02-20 18:10:57,988 INFO L290 TraceCheckUtils]: 4: Hoare triple {577#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {577#true} is VALID [2022-02-20 18:10:57,988 INFO L290 TraceCheckUtils]: 5: Hoare triple {577#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {577#true} is VALID [2022-02-20 18:10:57,991 INFO L290 TraceCheckUtils]: 6: Hoare triple {577#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {579#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:10:57,992 INFO L290 TraceCheckUtils]: 7: Hoare triple {579#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {579#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:10:57,992 INFO L290 TraceCheckUtils]: 8: Hoare triple {579#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {578#false} is VALID [2022-02-20 18:10:57,993 INFO L272 TraceCheckUtils]: 9: Hoare triple {578#false} call cleanup(); {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 10: Hoare triple {578#false} havoc ~i~0;havoc ~__cil_tmp2~0; {578#false} is VALID [2022-02-20 18:10:57,993 INFO L272 TraceCheckUtils]: 11: Hoare triple {578#false} call timeShift(); {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 12: Hoare triple {578#false} assume !(0 != ~pumpRunning~0); {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 13: Hoare triple {578#false} assume !(0 != ~systemActive~0); {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 14: Hoare triple {578#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 15: Hoare triple {578#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 16: Hoare triple {578#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {578#false} is VALID [2022-02-20 18:10:57,993 INFO L290 TraceCheckUtils]: 17: Hoare triple {578#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {578#false} is VALID [2022-02-20 18:10:57,994 INFO L290 TraceCheckUtils]: 18: Hoare triple {578#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {578#false} is VALID [2022-02-20 18:10:57,994 INFO L290 TraceCheckUtils]: 19: Hoare triple {578#false} assume !false; {578#false} is VALID [2022-02-20 18:10:57,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:57,994 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:57,994 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448986227] [2022-02-20 18:10:57,994 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448986227] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:57,994 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:57,994 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:10:57,995 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332224556] [2022-02-20 18:10:57,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:57,996 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:10:57,996 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:57,996 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,015 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,016 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:10:58,016 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:10:58,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:10:58,018 INFO L87 Difference]: Start difference. First operand 74 states and 96 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,107 INFO L93 Difference]: Finished difference Result 113 states and 147 transitions. [2022-02-20 18:10:58,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:10:58,107 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:10:58,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:58,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 147 transitions. [2022-02-20 18:10:58,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 147 transitions. [2022-02-20 18:10:58,112 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 147 transitions. [2022-02-20 18:10:58,205 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 147 edges. 147 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,210 INFO L225 Difference]: With dead ends: 113 [2022-02-20 18:10:58,210 INFO L226 Difference]: Without dead ends: 65 [2022-02-20 18:10:58,212 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:10:58,212 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 13 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:58,213 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 149 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:10:58,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-02-20 18:10:58,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65. [2022-02-20 18:10:58,217 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:58,217 INFO L82 GeneralOperation]: Start isEquivalent. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,217 INFO L74 IsIncluded]: Start isIncluded. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,218 INFO L87 Difference]: Start difference. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,220 INFO L93 Difference]: Finished difference Result 65 states and 84 transitions. [2022-02-20 18:10:58,220 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2022-02-20 18:10:58,220 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,220 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,221 INFO L74 IsIncluded]: Start isIncluded. First operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Second operand 65 states. [2022-02-20 18:10:58,221 INFO L87 Difference]: Start difference. First operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Second operand 65 states. [2022-02-20 18:10:58,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,223 INFO L93 Difference]: Finished difference Result 65 states and 84 transitions. [2022-02-20 18:10:58,223 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2022-02-20 18:10:58,224 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,224 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:58,224 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:58,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 52 states have (on average 1.3461538461538463) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 84 transitions. [2022-02-20 18:10:58,226 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 84 transitions. Word has length 20 [2022-02-20 18:10:58,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:58,226 INFO L470 AbstractCegarLoop]: Abstraction has 65 states and 84 transitions. [2022-02-20 18:10:58,226 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,227 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 84 transitions. [2022-02-20 18:10:58,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-02-20 18:10:58,227 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:58,227 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:58,227 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:10:58,227 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:58,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:58,228 INFO L85 PathProgramCache]: Analyzing trace with hash -2024480710, now seen corresponding path program 1 times [2022-02-20 18:10:58,228 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:58,228 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262186635] [2022-02-20 18:10:58,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:58,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:58,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,306 INFO L290 TraceCheckUtils]: 0: Hoare triple {971#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {973#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,307 INFO L290 TraceCheckUtils]: 1: Hoare triple {973#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {973#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,307 INFO L290 TraceCheckUtils]: 2: Hoare triple {973#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {973#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,308 INFO L290 TraceCheckUtils]: 3: Hoare triple {973#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {974#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} is VALID [2022-02-20 18:10:58,308 INFO L290 TraceCheckUtils]: 4: Hoare triple {974#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {975#(= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0)} is VALID [2022-02-20 18:10:58,309 INFO L290 TraceCheckUtils]: 5: Hoare triple {975#(= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0)} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,309 INFO L290 TraceCheckUtils]: 6: Hoare triple {976#(not (= 0 ~systemActive~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,309 INFO L290 TraceCheckUtils]: 7: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !false; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,310 INFO L290 TraceCheckUtils]: 8: Hoare triple {976#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0#1 < 4; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,310 INFO L290 TraceCheckUtils]: 9: Hoare triple {976#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,311 INFO L290 TraceCheckUtils]: 10: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~9#1); {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,311 INFO L290 TraceCheckUtils]: 11: Hoare triple {976#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,312 INFO L290 TraceCheckUtils]: 12: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~3#1); {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,312 INFO L290 TraceCheckUtils]: 13: Hoare triple {976#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,313 INFO L290 TraceCheckUtils]: 14: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,313 INFO L290 TraceCheckUtils]: 15: Hoare triple {976#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___1~0#1; {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,313 INFO L272 TraceCheckUtils]: 16: Hoare triple {976#(not (= 0 ~systemActive~0))} call timeShift(); {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,314 INFO L290 TraceCheckUtils]: 17: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {976#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,314 INFO L290 TraceCheckUtils]: 18: Hoare triple {976#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {972#false} is VALID [2022-02-20 18:10:58,314 INFO L290 TraceCheckUtils]: 19: Hoare triple {972#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {972#false} is VALID [2022-02-20 18:10:58,314 INFO L290 TraceCheckUtils]: 20: Hoare triple {972#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {972#false} is VALID [2022-02-20 18:10:58,315 INFO L290 TraceCheckUtils]: 21: Hoare triple {972#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {972#false} is VALID [2022-02-20 18:10:58,315 INFO L290 TraceCheckUtils]: 22: Hoare triple {972#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {972#false} is VALID [2022-02-20 18:10:58,315 INFO L290 TraceCheckUtils]: 23: Hoare triple {972#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {972#false} is VALID [2022-02-20 18:10:58,315 INFO L290 TraceCheckUtils]: 24: Hoare triple {972#false} assume !false; {972#false} is VALID [2022-02-20 18:10:58,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:58,315 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:58,315 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262186635] [2022-02-20 18:10:58,316 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262186635] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:58,316 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:58,316 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:10:58,316 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111651483] [2022-02-20 18:10:58,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:58,316 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-02-20 18:10:58,316 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:58,317 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,333 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,333 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:10:58,333 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:10:58,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:10:58,334 INFO L87 Difference]: Start difference. First operand 65 states and 84 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,541 INFO L93 Difference]: Finished difference Result 123 states and 162 transitions. [2022-02-20 18:10:58,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:10:58,542 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-02-20 18:10:58,542 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:58,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 162 transitions. [2022-02-20 18:10:58,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 162 transitions. [2022-02-20 18:10:58,546 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 162 transitions. [2022-02-20 18:10:58,668 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 162 edges. 162 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,669 INFO L225 Difference]: With dead ends: 123 [2022-02-20 18:10:58,669 INFO L226 Difference]: Without dead ends: 65 [2022-02-20 18:10:58,670 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:10:58,671 INFO L933 BasicCegarLoop]: 77 mSDtfsCounter, 109 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:58,671 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [109 Valid, 175 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:10:58,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-02-20 18:10:58,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 65. [2022-02-20 18:10:58,690 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:58,691 INFO L82 GeneralOperation]: Start isEquivalent. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,691 INFO L74 IsIncluded]: Start isIncluded. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,692 INFO L87 Difference]: Start difference. First operand 65 states. Second operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,694 INFO L93 Difference]: Finished difference Result 65 states and 83 transitions. [2022-02-20 18:10:58,694 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 83 transitions. [2022-02-20 18:10:58,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,697 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,697 INFO L74 IsIncluded]: Start isIncluded. First operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Second operand 65 states. [2022-02-20 18:10:58,697 INFO L87 Difference]: Start difference. First operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) Second operand 65 states. [2022-02-20 18:10:58,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,700 INFO L93 Difference]: Finished difference Result 65 states and 83 transitions. [2022-02-20 18:10:58,700 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 83 transitions. [2022-02-20 18:10:58,700 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,700 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,700 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:58,701 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:58,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 52 states have (on average 1.3269230769230769) internal successors, (69), 59 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:10:58,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 83 transitions. [2022-02-20 18:10:58,704 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 83 transitions. Word has length 25 [2022-02-20 18:10:58,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:58,705 INFO L470 AbstractCegarLoop]: Abstraction has 65 states and 83 transitions. [2022-02-20 18:10:58,705 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,705 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 83 transitions. [2022-02-20 18:10:58,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-02-20 18:10:58,706 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:58,706 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:58,706 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:10:58,706 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:58,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:58,708 INFO L85 PathProgramCache]: Analyzing trace with hash 1530438702, now seen corresponding path program 1 times [2022-02-20 18:10:58,708 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:58,708 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [705401552] [2022-02-20 18:10:58,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:58,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:58,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:10:58,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:10:58,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,808 INFO L290 TraceCheckUtils]: 0: Hoare triple {1384#true} assume true; {1384#true} is VALID [2022-02-20 18:10:58,809 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1384#true} {1395#(not (= |old(~pumpRunning~0)| 0))} #244#return; {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,809 INFO L290 TraceCheckUtils]: 0: Hoare triple {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:10:58,809 INFO L290 TraceCheckUtils]: 1: Hoare triple {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,810 INFO L272 TraceCheckUtils]: 2: Hoare triple {1395#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1384#true} is VALID [2022-02-20 18:10:58,810 INFO L290 TraceCheckUtils]: 3: Hoare triple {1384#true} assume true; {1384#true} is VALID [2022-02-20 18:10:58,810 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1384#true} {1395#(not (= |old(~pumpRunning~0)| 0))} #244#return; {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,810 INFO L290 TraceCheckUtils]: 5: Hoare triple {1395#(not (= |old(~pumpRunning~0)| 0))} assume true; {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,811 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1395#(not (= |old(~pumpRunning~0)| 0))} {1386#(= ~pumpRunning~0 0)} #228#return; {1385#false} is VALID [2022-02-20 18:10:58,811 INFO L290 TraceCheckUtils]: 0: Hoare triple {1384#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {1386#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,812 INFO L290 TraceCheckUtils]: 2: Hoare triple {1386#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,812 INFO L290 TraceCheckUtils]: 3: Hoare triple {1386#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,813 INFO L290 TraceCheckUtils]: 4: Hoare triple {1386#(= ~pumpRunning~0 0)} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,813 INFO L290 TraceCheckUtils]: 5: Hoare triple {1386#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,813 INFO L290 TraceCheckUtils]: 6: Hoare triple {1386#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,814 INFO L290 TraceCheckUtils]: 7: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !false; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,814 INFO L290 TraceCheckUtils]: 8: Hoare triple {1386#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,814 INFO L290 TraceCheckUtils]: 9: Hoare triple {1386#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,815 INFO L290 TraceCheckUtils]: 10: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~9#1); {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,817 INFO L290 TraceCheckUtils]: 11: Hoare triple {1386#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,817 INFO L290 TraceCheckUtils]: 12: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,818 INFO L290 TraceCheckUtils]: 13: Hoare triple {1386#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,818 INFO L290 TraceCheckUtils]: 14: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,818 INFO L290 TraceCheckUtils]: 15: Hoare triple {1386#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,819 INFO L272 TraceCheckUtils]: 16: Hoare triple {1386#(= ~pumpRunning~0 0)} call timeShift(); {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,819 INFO L290 TraceCheckUtils]: 17: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,820 INFO L290 TraceCheckUtils]: 18: Hoare triple {1386#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,821 INFO L290 TraceCheckUtils]: 19: Hoare triple {1386#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1386#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:10:58,822 INFO L272 TraceCheckUtils]: 20: Hoare triple {1386#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:10:58,822 INFO L290 TraceCheckUtils]: 21: Hoare triple {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:10:58,822 INFO L290 TraceCheckUtils]: 22: Hoare triple {1394#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,822 INFO L272 TraceCheckUtils]: 23: Hoare triple {1395#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1384#true} is VALID [2022-02-20 18:10:58,823 INFO L290 TraceCheckUtils]: 24: Hoare triple {1384#true} assume true; {1384#true} is VALID [2022-02-20 18:10:58,823 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {1384#true} {1395#(not (= |old(~pumpRunning~0)| 0))} #244#return; {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,825 INFO L290 TraceCheckUtils]: 26: Hoare triple {1395#(not (= |old(~pumpRunning~0)| 0))} assume true; {1395#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:10:58,825 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {1395#(not (= |old(~pumpRunning~0)| 0))} {1386#(= ~pumpRunning~0 0)} #228#return; {1385#false} is VALID [2022-02-20 18:10:58,825 INFO L290 TraceCheckUtils]: 28: Hoare triple {1385#false} assume { :end_inline_processEnvironment } true; {1385#false} is VALID [2022-02-20 18:10:58,826 INFO L290 TraceCheckUtils]: 29: Hoare triple {1385#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {1385#false} is VALID [2022-02-20 18:10:58,826 INFO L290 TraceCheckUtils]: 30: Hoare triple {1385#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {1385#false} is VALID [2022-02-20 18:10:58,826 INFO L290 TraceCheckUtils]: 31: Hoare triple {1385#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {1385#false} is VALID [2022-02-20 18:10:58,828 INFO L290 TraceCheckUtils]: 32: Hoare triple {1385#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {1385#false} is VALID [2022-02-20 18:10:58,828 INFO L290 TraceCheckUtils]: 33: Hoare triple {1385#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1385#false} is VALID [2022-02-20 18:10:58,829 INFO L290 TraceCheckUtils]: 34: Hoare triple {1385#false} assume !false; {1385#false} is VALID [2022-02-20 18:10:58,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:58,829 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:58,829 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [705401552] [2022-02-20 18:10:58,830 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [705401552] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:58,830 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:58,830 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:10:58,830 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391863879] [2022-02-20 18:10:58,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:58,831 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2022-02-20 18:10:58,831 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:58,834 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:10:58,853 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,853 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:10:58,853 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:10:58,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:10:58,855 INFO L87 Difference]: Start difference. First operand 65 states and 83 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:10:59,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,103 INFO L93 Difference]: Finished difference Result 186 states and 238 transitions. [2022-02-20 18:10:59,103 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:10:59,103 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2022-02-20 18:10:59,104 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:59,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:10:59,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 238 transitions. [2022-02-20 18:10:59,106 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:10:59,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 238 transitions. [2022-02-20 18:10:59,109 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 238 transitions. [2022-02-20 18:10:59,246 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 238 edges. 238 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:59,249 INFO L225 Difference]: With dead ends: 186 [2022-02-20 18:10:59,249 INFO L226 Difference]: Without dead ends: 128 [2022-02-20 18:10:59,249 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:10:59,250 INFO L933 BasicCegarLoop]: 112 mSDtfsCounter, 149 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 74 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 74 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:59,250 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [151 Valid, 269 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 74 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:10:59,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-02-20 18:10:59,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 122. [2022-02-20 18:10:59,267 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:59,267 INFO L82 GeneralOperation]: Start isEquivalent. First operand 128 states. Second operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-02-20 18:10:59,267 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-02-20 18:10:59,268 INFO L87 Difference]: Start difference. First operand 128 states. Second operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-02-20 18:10:59,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,271 INFO L93 Difference]: Finished difference Result 128 states and 153 transitions. [2022-02-20 18:10:59,271 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 153 transitions. [2022-02-20 18:10:59,271 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:59,271 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:59,271 INFO L74 IsIncluded]: Start isIncluded. First operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) Second operand 128 states. [2022-02-20 18:10:59,272 INFO L87 Difference]: Start difference. First operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) Second operand 128 states. [2022-02-20 18:10:59,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,275 INFO L93 Difference]: Finished difference Result 128 states and 153 transitions. [2022-02-20 18:10:59,275 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 153 transitions. [2022-02-20 18:10:59,278 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:59,279 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:59,279 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:59,279 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:59,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 122 states, 98 states have (on average 1.2755102040816326) internal successors, (125), 105 states have internal predecessors, (125), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-02-20 18:10:59,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 122 states to 122 states and 150 transitions. [2022-02-20 18:10:59,283 INFO L78 Accepts]: Start accepts. Automaton has 122 states and 150 transitions. Word has length 35 [2022-02-20 18:10:59,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:59,284 INFO L470 AbstractCegarLoop]: Abstraction has 122 states and 150 transitions. [2022-02-20 18:10:59,284 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:10:59,284 INFO L276 IsEmpty]: Start isEmpty. Operand 122 states and 150 transitions. [2022-02-20 18:10:59,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-02-20 18:10:59,285 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:59,285 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:59,285 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:10:59,285 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:59,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:59,285 INFO L85 PathProgramCache]: Analyzing trace with hash 699766483, now seen corresponding path program 1 times [2022-02-20 18:10:59,286 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:59,286 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181776930] [2022-02-20 18:10:59,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:59,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:59,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:59,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:10:59,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:59,365 INFO L290 TraceCheckUtils]: 0: Hoare triple {2113#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {2099#true} is VALID [2022-02-20 18:10:59,365 INFO L290 TraceCheckUtils]: 1: Hoare triple {2099#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {2099#true} is VALID [2022-02-20 18:10:59,367 INFO L290 TraceCheckUtils]: 2: Hoare triple {2099#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {2114#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:10:59,367 INFO L290 TraceCheckUtils]: 3: Hoare triple {2114#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {2115#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 4: Hoare triple {2115#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 5: Hoare triple {2100#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 6: Hoare triple {2100#false} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 7: Hoare triple {2100#false} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 8: Hoare triple {2100#false} assume { :end_inline_activatePump } true; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L290 TraceCheckUtils]: 9: Hoare triple {2100#false} assume true; {2100#false} is VALID [2022-02-20 18:10:59,368 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2100#false} {2101#(= ~waterLevel~0 1)} #228#return; {2100#false} is VALID [2022-02-20 18:10:59,369 INFO L290 TraceCheckUtils]: 0: Hoare triple {2099#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,369 INFO L290 TraceCheckUtils]: 1: Hoare triple {2101#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,369 INFO L290 TraceCheckUtils]: 2: Hoare triple {2101#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,370 INFO L290 TraceCheckUtils]: 3: Hoare triple {2101#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,370 INFO L290 TraceCheckUtils]: 4: Hoare triple {2101#(= ~waterLevel~0 1)} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,370 INFO L290 TraceCheckUtils]: 5: Hoare triple {2101#(= ~waterLevel~0 1)} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,371 INFO L290 TraceCheckUtils]: 6: Hoare triple {2101#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,371 INFO L290 TraceCheckUtils]: 7: Hoare triple {2101#(= ~waterLevel~0 1)} assume !false; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,371 INFO L290 TraceCheckUtils]: 8: Hoare triple {2101#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,372 INFO L290 TraceCheckUtils]: 9: Hoare triple {2101#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,372 INFO L290 TraceCheckUtils]: 10: Hoare triple {2101#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~9#1); {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,372 INFO L290 TraceCheckUtils]: 11: Hoare triple {2101#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,372 INFO L290 TraceCheckUtils]: 12: Hoare triple {2101#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~3#1); {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,373 INFO L290 TraceCheckUtils]: 13: Hoare triple {2101#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,373 INFO L290 TraceCheckUtils]: 14: Hoare triple {2101#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,373 INFO L290 TraceCheckUtils]: 15: Hoare triple {2101#(= ~waterLevel~0 1)} assume 0 != test_~tmp___1~0#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,374 INFO L272 TraceCheckUtils]: 16: Hoare triple {2101#(= ~waterLevel~0 1)} call timeShift(); {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,374 INFO L290 TraceCheckUtils]: 17: Hoare triple {2101#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,374 INFO L290 TraceCheckUtils]: 18: Hoare triple {2101#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,374 INFO L290 TraceCheckUtils]: 19: Hoare triple {2101#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {2101#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,375 INFO L272 TraceCheckUtils]: 20: Hoare triple {2101#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {2113#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:10:59,375 INFO L290 TraceCheckUtils]: 21: Hoare triple {2113#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {2099#true} is VALID [2022-02-20 18:10:59,375 INFO L290 TraceCheckUtils]: 22: Hoare triple {2099#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {2099#true} is VALID [2022-02-20 18:10:59,376 INFO L290 TraceCheckUtils]: 23: Hoare triple {2099#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {2114#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)} is VALID [2022-02-20 18:10:59,376 INFO L290 TraceCheckUtils]: 24: Hoare triple {2114#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {2115#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)} is VALID [2022-02-20 18:10:59,376 INFO L290 TraceCheckUtils]: 25: Hoare triple {2115#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2100#false} is VALID [2022-02-20 18:10:59,376 INFO L290 TraceCheckUtils]: 26: Hoare triple {2100#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {2100#false} is VALID [2022-02-20 18:10:59,376 INFO L290 TraceCheckUtils]: 27: Hoare triple {2100#false} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 28: Hoare triple {2100#false} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 29: Hoare triple {2100#false} assume { :end_inline_activatePump } true; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 30: Hoare triple {2100#false} assume true; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {2100#false} {2101#(= ~waterLevel~0 1)} #228#return; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 32: Hoare triple {2100#false} assume { :end_inline_processEnvironment } true; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 33: Hoare triple {2100#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 34: Hoare triple {2100#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 35: Hoare triple {2100#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 36: Hoare triple {2100#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 37: Hoare triple {2100#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {2100#false} is VALID [2022-02-20 18:10:59,377 INFO L290 TraceCheckUtils]: 38: Hoare triple {2100#false} assume !false; {2100#false} is VALID [2022-02-20 18:10:59,378 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:59,378 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:59,378 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181776930] [2022-02-20 18:10:59,378 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1181776930] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:59,378 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:59,378 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:10:59,378 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1212365859] [2022-02-20 18:10:59,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:59,378 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:10:59,379 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:59,379 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:10:59,400 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:59,400 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:10:59,400 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:59,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:10:59,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:10:59,401 INFO L87 Difference]: Start difference. First operand 122 states and 150 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:10:59,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,842 INFO L93 Difference]: Finished difference Result 346 states and 449 transitions. [2022-02-20 18:10:59,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:10:59,842 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:10:59,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:59,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:10:59,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 290 transitions. [2022-02-20 18:10:59,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:10:59,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 290 transitions. [2022-02-20 18:10:59,850 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 290 transitions. [2022-02-20 18:11:00,036 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,041 INFO L225 Difference]: With dead ends: 346 [2022-02-20 18:11:00,043 INFO L226 Difference]: Without dead ends: 231 [2022-02-20 18:11:00,043 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:11:00,044 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 144 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:00,047 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [147 Valid, 358 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:00,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-02-20 18:11:00,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 198. [2022-02-20 18:11:00,066 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:00,066 INFO L82 GeneralOperation]: Start isEquivalent. First operand 231 states. Second operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,067 INFO L74 IsIncluded]: Start isIncluded. First operand 231 states. Second operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,067 INFO L87 Difference]: Start difference. First operand 231 states. Second operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,073 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,073 INFO L93 Difference]: Finished difference Result 231 states and 285 transitions. [2022-02-20 18:11:00,073 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 285 transitions. [2022-02-20 18:11:00,074 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,074 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,075 INFO L74 IsIncluded]: Start isIncluded. First operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) Second operand 231 states. [2022-02-20 18:11:00,075 INFO L87 Difference]: Start difference. First operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) Second operand 231 states. [2022-02-20 18:11:00,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,083 INFO L93 Difference]: Finished difference Result 231 states and 285 transitions. [2022-02-20 18:11:00,083 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 285 transitions. [2022-02-20 18:11:00,084 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,084 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,084 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:00,084 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:00,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 159 states have (on average 1.2767295597484276) internal successors, (203), 168 states have internal predecessors, (203), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 249 transitions. [2022-02-20 18:11:00,092 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 249 transitions. Word has length 39 [2022-02-20 18:11:00,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:00,092 INFO L470 AbstractCegarLoop]: Abstraction has 198 states and 249 transitions. [2022-02-20 18:11:00,092 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,092 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 249 transitions. [2022-02-20 18:11:00,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-02-20 18:11:00,095 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:00,095 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:00,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:11:00,096 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:00,097 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:00,097 INFO L85 PathProgramCache]: Analyzing trace with hash 1720834837, now seen corresponding path program 1 times [2022-02-20 18:11:00,098 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:00,098 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [719417213] [2022-02-20 18:11:00,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:00,098 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:00,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:00,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,193 INFO L290 TraceCheckUtils]: 0: Hoare triple {3374#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {3361#true} is VALID [2022-02-20 18:11:00,193 INFO L290 TraceCheckUtils]: 1: Hoare triple {3361#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {3361#true} is VALID [2022-02-20 18:11:00,193 INFO L290 TraceCheckUtils]: 2: Hoare triple {3361#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {3361#true} is VALID [2022-02-20 18:11:00,193 INFO L290 TraceCheckUtils]: 3: Hoare triple {3361#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {3361#true} is VALID [2022-02-20 18:11:00,194 INFO L290 TraceCheckUtils]: 4: Hoare triple {3361#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:00,194 INFO L290 TraceCheckUtils]: 5: Hoare triple {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {3376#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:00,194 INFO L290 TraceCheckUtils]: 6: Hoare triple {3376#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {3377#(= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 7: Hoare triple {3377#(= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3362#false} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 8: Hoare triple {3362#false} assume { :end_inline_activatePump } true; {3362#false} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 9: Hoare triple {3362#false} assume true; {3362#false} is VALID [2022-02-20 18:11:00,195 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {3362#false} {3361#true} #228#return; {3362#false} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 0: Hoare triple {3361#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3361#true} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 1: Hoare triple {3361#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {3361#true} is VALID [2022-02-20 18:11:00,195 INFO L290 TraceCheckUtils]: 2: Hoare triple {3361#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 3: Hoare triple {3361#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 4: Hoare triple {3361#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 5: Hoare triple {3361#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 6: Hoare triple {3361#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 7: Hoare triple {3361#true} assume !false; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 8: Hoare triple {3361#true} assume test_~splverifierCounter~0#1 < 4; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 9: Hoare triple {3361#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 10: Hoare triple {3361#true} assume !(0 != test_~tmp~9#1); {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 11: Hoare triple {3361#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 12: Hoare triple {3361#true} assume !(0 != test_~tmp___0~3#1); {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 13: Hoare triple {3361#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {3361#true} is VALID [2022-02-20 18:11:00,196 INFO L290 TraceCheckUtils]: 14: Hoare triple {3361#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {3361#true} is VALID [2022-02-20 18:11:00,197 INFO L290 TraceCheckUtils]: 15: Hoare triple {3361#true} assume 0 != test_~tmp___1~0#1; {3361#true} is VALID [2022-02-20 18:11:00,197 INFO L272 TraceCheckUtils]: 16: Hoare triple {3361#true} call timeShift(); {3361#true} is VALID [2022-02-20 18:11:00,197 INFO L290 TraceCheckUtils]: 17: Hoare triple {3361#true} assume !(0 != ~pumpRunning~0); {3361#true} is VALID [2022-02-20 18:11:00,197 INFO L290 TraceCheckUtils]: 18: Hoare triple {3361#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {3361#true} is VALID [2022-02-20 18:11:00,197 INFO L290 TraceCheckUtils]: 19: Hoare triple {3361#true} assume !(0 != ~pumpRunning~0); {3361#true} is VALID [2022-02-20 18:11:00,207 INFO L272 TraceCheckUtils]: 20: Hoare triple {3361#true} call processEnvironment__wrappee__highWaterSensor(); {3374#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:00,207 INFO L290 TraceCheckUtils]: 21: Hoare triple {3374#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {3361#true} is VALID [2022-02-20 18:11:00,208 INFO L290 TraceCheckUtils]: 22: Hoare triple {3361#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {3361#true} is VALID [2022-02-20 18:11:00,208 INFO L290 TraceCheckUtils]: 23: Hoare triple {3361#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {3361#true} is VALID [2022-02-20 18:11:00,208 INFO L290 TraceCheckUtils]: 24: Hoare triple {3361#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {3361#true} is VALID [2022-02-20 18:11:00,208 INFO L290 TraceCheckUtils]: 25: Hoare triple {3361#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:00,209 INFO L290 TraceCheckUtils]: 26: Hoare triple {3375#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {3376#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:00,209 INFO L290 TraceCheckUtils]: 27: Hoare triple {3376#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {3377#(= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)} is VALID [2022-02-20 18:11:00,209 INFO L290 TraceCheckUtils]: 28: Hoare triple {3377#(= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3362#false} is VALID [2022-02-20 18:11:00,209 INFO L290 TraceCheckUtils]: 29: Hoare triple {3362#false} assume { :end_inline_activatePump } true; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L290 TraceCheckUtils]: 30: Hoare triple {3362#false} assume true; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3362#false} {3361#true} #228#return; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L290 TraceCheckUtils]: 32: Hoare triple {3362#false} assume { :end_inline_processEnvironment } true; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L290 TraceCheckUtils]: 33: Hoare triple {3362#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L290 TraceCheckUtils]: 34: Hoare triple {3362#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {3362#false} is VALID [2022-02-20 18:11:00,210 INFO L290 TraceCheckUtils]: 35: Hoare triple {3362#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {3362#false} is VALID [2022-02-20 18:11:00,211 INFO L290 TraceCheckUtils]: 36: Hoare triple {3362#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {3362#false} is VALID [2022-02-20 18:11:00,211 INFO L290 TraceCheckUtils]: 37: Hoare triple {3362#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {3362#false} is VALID [2022-02-20 18:11:00,211 INFO L290 TraceCheckUtils]: 38: Hoare triple {3362#false} assume !false; {3362#false} is VALID [2022-02-20 18:11:00,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:00,211 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:00,211 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [719417213] [2022-02-20 18:11:00,212 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [719417213] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:00,212 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:00,212 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:00,212 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124020151] [2022-02-20 18:11:00,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:00,213 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:11:00,213 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:00,213 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,240 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,240 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:00,240 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:00,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:00,241 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:00,241 INFO L87 Difference]: Start difference. First operand 198 states and 249 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,527 INFO L93 Difference]: Finished difference Result 403 states and 514 transitions. [2022-02-20 18:11:00,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:11:00,527 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:11:00,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:00,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 184 transitions. [2022-02-20 18:11:00,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 184 transitions. [2022-02-20 18:11:00,531 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 184 transitions. [2022-02-20 18:11:00,637 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 184 edges. 184 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,640 INFO L225 Difference]: With dead ends: 403 [2022-02-20 18:11:00,640 INFO L226 Difference]: Without dead ends: 212 [2022-02-20 18:11:00,641 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:11:00,642 INFO L933 BasicCegarLoop]: 83 mSDtfsCounter, 59 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 90 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 107 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 90 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:00,642 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [60 Valid, 338 Invalid, 107 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 90 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:00,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2022-02-20 18:11:00,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 204. [2022-02-20 18:11:00,650 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:00,651 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,667 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,668 INFO L87 Difference]: Start difference. First operand 212 states. Second operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,674 INFO L93 Difference]: Finished difference Result 212 states and 264 transitions. [2022-02-20 18:11:00,674 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 264 transitions. [2022-02-20 18:11:00,675 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,675 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,675 INFO L74 IsIncluded]: Start isIncluded. First operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) Second operand 212 states. [2022-02-20 18:11:00,676 INFO L87 Difference]: Start difference. First operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) Second operand 212 states. [2022-02-20 18:11:00,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,682 INFO L93 Difference]: Finished difference Result 212 states and 264 transitions. [2022-02-20 18:11:00,682 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 264 transitions. [2022-02-20 18:11:00,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,683 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,683 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:00,683 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:00,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 165 states have (on average 1.2666666666666666) internal successors, (209), 174 states have internal predecessors, (209), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-02-20 18:11:00,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 255 transitions. [2022-02-20 18:11:00,689 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 255 transitions. Word has length 39 [2022-02-20 18:11:00,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:00,690 INFO L470 AbstractCegarLoop]: Abstraction has 204 states and 255 transitions. [2022-02-20 18:11:00,690 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,690 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 255 transitions. [2022-02-20 18:11:00,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-02-20 18:11:00,690 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:00,690 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:00,691 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:11:00,691 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:00,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:00,691 INFO L85 PathProgramCache]: Analyzing trace with hash 709717587, now seen corresponding path program 1 times [2022-02-20 18:11:00,691 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:00,691 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1694675456] [2022-02-20 18:11:00,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:00,691 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:00,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:00,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,742 INFO L290 TraceCheckUtils]: 0: Hoare triple {4683#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {4670#true} is VALID [2022-02-20 18:11:00,742 INFO L290 TraceCheckUtils]: 1: Hoare triple {4670#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {4670#true} is VALID [2022-02-20 18:11:00,743 INFO L290 TraceCheckUtils]: 2: Hoare triple {4670#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {4684#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 3: Hoare triple {4684#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {4685#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) 0)} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 4: Hoare triple {4685#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 5: Hoare triple {4671#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 6: Hoare triple {4671#false} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 7: Hoare triple {4671#false} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 8: Hoare triple {4671#false} assume { :end_inline_activatePump } true; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L290 TraceCheckUtils]: 9: Hoare triple {4671#false} assume true; {4671#false} is VALID [2022-02-20 18:11:00,744 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4671#false} {4670#true} #228#return; {4671#false} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 0: Hoare triple {4670#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 1: Hoare triple {4670#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 2: Hoare triple {4670#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 3: Hoare triple {4670#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 4: Hoare triple {4670#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 5: Hoare triple {4670#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 6: Hoare triple {4670#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 7: Hoare triple {4670#true} assume !false; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 8: Hoare triple {4670#true} assume test_~splverifierCounter~0#1 < 4; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 9: Hoare triple {4670#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 10: Hoare triple {4670#true} assume !(0 != test_~tmp~9#1); {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 11: Hoare triple {4670#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {4670#true} is VALID [2022-02-20 18:11:00,745 INFO L290 TraceCheckUtils]: 12: Hoare triple {4670#true} assume !(0 != test_~tmp___0~3#1); {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 13: Hoare triple {4670#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 14: Hoare triple {4670#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 15: Hoare triple {4670#true} assume 0 != test_~tmp___1~0#1; {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L272 TraceCheckUtils]: 16: Hoare triple {4670#true} call timeShift(); {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 17: Hoare triple {4670#true} assume !(0 != ~pumpRunning~0); {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 18: Hoare triple {4670#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L290 TraceCheckUtils]: 19: Hoare triple {4670#true} assume !(0 != ~pumpRunning~0); {4670#true} is VALID [2022-02-20 18:11:00,746 INFO L272 TraceCheckUtils]: 20: Hoare triple {4670#true} call processEnvironment__wrappee__highWaterSensor(); {4683#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:00,747 INFO L290 TraceCheckUtils]: 21: Hoare triple {4683#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {4670#true} is VALID [2022-02-20 18:11:00,747 INFO L290 TraceCheckUtils]: 22: Hoare triple {4670#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {4670#true} is VALID [2022-02-20 18:11:00,747 INFO L290 TraceCheckUtils]: 23: Hoare triple {4670#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {4684#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:11:00,751 INFO L290 TraceCheckUtils]: 24: Hoare triple {4684#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {4685#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) 0)} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 25: Hoare triple {4685#(= (+ (- 1) |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1|) 0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 26: Hoare triple {4671#false} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 27: Hoare triple {4671#false} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 28: Hoare triple {4671#false} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 29: Hoare triple {4671#false} assume { :end_inline_activatePump } true; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 30: Hoare triple {4671#false} assume true; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {4671#false} {4670#true} #228#return; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 32: Hoare triple {4671#false} assume { :end_inline_processEnvironment } true; {4671#false} is VALID [2022-02-20 18:11:00,752 INFO L290 TraceCheckUtils]: 33: Hoare triple {4671#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L290 TraceCheckUtils]: 34: Hoare triple {4671#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L290 TraceCheckUtils]: 35: Hoare triple {4671#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L290 TraceCheckUtils]: 36: Hoare triple {4671#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L290 TraceCheckUtils]: 37: Hoare triple {4671#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L290 TraceCheckUtils]: 38: Hoare triple {4671#false} assume !false; {4671#false} is VALID [2022-02-20 18:11:00,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:00,753 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:00,753 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1694675456] [2022-02-20 18:11:00,753 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1694675456] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:00,753 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:00,753 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:11:00,753 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1309250611] [2022-02-20 18:11:00,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:00,754 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:11:00,754 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:00,754 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,773 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,774 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:11:00,774 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:00,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:11:00,774 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:00,774 INFO L87 Difference]: Start difference. First operand 204 states and 255 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,007 INFO L93 Difference]: Finished difference Result 372 states and 470 transitions. [2022-02-20 18:11:01,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:11:01,007 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-02-20 18:11:01,007 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:01,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 184 transitions. [2022-02-20 18:11:01,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 184 transitions. [2022-02-20 18:11:01,010 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 184 transitions. [2022-02-20 18:11:01,108 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 184 edges. 184 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,113 INFO L225 Difference]: With dead ends: 372 [2022-02-20 18:11:01,113 INFO L226 Difference]: Without dead ends: 175 [2022-02-20 18:11:01,114 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:01,117 INFO L933 BasicCegarLoop]: 70 mSDtfsCounter, 60 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:01,117 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 224 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:01,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2022-02-20 18:11:01,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 170. [2022-02-20 18:11:01,131 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:01,131 INFO L82 GeneralOperation]: Start isEquivalent. First operand 175 states. Second operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,132 INFO L74 IsIncluded]: Start isIncluded. First operand 175 states. Second operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,133 INFO L87 Difference]: Start difference. First operand 175 states. Second operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,136 INFO L93 Difference]: Finished difference Result 175 states and 210 transitions. [2022-02-20 18:11:01,136 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 210 transitions. [2022-02-20 18:11:01,136 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,136 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,138 INFO L74 IsIncluded]: Start isIncluded. First operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) Second operand 175 states. [2022-02-20 18:11:01,138 INFO L87 Difference]: Start difference. First operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) Second operand 175 states. [2022-02-20 18:11:01,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,141 INFO L93 Difference]: Finished difference Result 175 states and 210 transitions. [2022-02-20 18:11:01,141 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 210 transitions. [2022-02-20 18:11:01,142 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,142 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,142 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:01,143 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:01,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 170 states, 137 states have (on average 1.2408759124087592) internal successors, (170), 145 states have internal predecessors, (170), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 170 states to 170 states and 205 transitions. [2022-02-20 18:11:01,146 INFO L78 Accepts]: Start accepts. Automaton has 170 states and 205 transitions. Word has length 39 [2022-02-20 18:11:01,147 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:01,147 INFO L470 AbstractCegarLoop]: Abstraction has 170 states and 205 transitions. [2022-02-20 18:11:01,147 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,147 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 205 transitions. [2022-02-20 18:11:01,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-20 18:11:01,148 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:01,148 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:01,148 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:11:01,149 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:01,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:01,149 INFO L85 PathProgramCache]: Analyzing trace with hash 11284582, now seen corresponding path program 1 times [2022-02-20 18:11:01,149 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:01,149 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117016848] [2022-02-20 18:11:01,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:01,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:01,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:01,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:01,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {5808#true} assume true; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {5808#true} {5808#true} #242#return; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L290 TraceCheckUtils]: 0: Hoare triple {5826#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {5808#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L290 TraceCheckUtils]: 2: Hoare triple {5808#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L290 TraceCheckUtils]: 3: Hoare triple {5808#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {5808#true} is VALID [2022-02-20 18:11:01,225 INFO L290 TraceCheckUtils]: 4: Hoare triple {5808#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L290 TraceCheckUtils]: 5: Hoare triple {5808#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L290 TraceCheckUtils]: 6: Hoare triple {5808#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L290 TraceCheckUtils]: 7: Hoare triple {5808#true} assume !(0 != ~tmp~5#1); {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L272 TraceCheckUtils]: 8: Hoare triple {5808#true} call processEnvironment__wrappee__base(); {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L290 TraceCheckUtils]: 9: Hoare triple {5808#true} assume true; {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5808#true} {5808#true} #242#return; {5808#true} is VALID [2022-02-20 18:11:01,226 INFO L290 TraceCheckUtils]: 11: Hoare triple {5808#true} assume true; {5808#true} is VALID [2022-02-20 18:11:01,227 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5808#true} {5810#(= ~waterLevel~0 1)} #228#return; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,228 INFO L290 TraceCheckUtils]: 0: Hoare triple {5808#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,229 INFO L290 TraceCheckUtils]: 1: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,229 INFO L290 TraceCheckUtils]: 2: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,229 INFO L290 TraceCheckUtils]: 3: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,230 INFO L290 TraceCheckUtils]: 4: Hoare triple {5810#(= ~waterLevel~0 1)} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,230 INFO L290 TraceCheckUtils]: 5: Hoare triple {5810#(= ~waterLevel~0 1)} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,230 INFO L290 TraceCheckUtils]: 6: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,230 INFO L290 TraceCheckUtils]: 7: Hoare triple {5810#(= ~waterLevel~0 1)} assume !false; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,231 INFO L290 TraceCheckUtils]: 8: Hoare triple {5810#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,231 INFO L290 TraceCheckUtils]: 9: Hoare triple {5810#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,231 INFO L290 TraceCheckUtils]: 10: Hoare triple {5810#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~9#1); {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,232 INFO L290 TraceCheckUtils]: 11: Hoare triple {5810#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,232 INFO L290 TraceCheckUtils]: 12: Hoare triple {5810#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~3#1); {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,232 INFO L290 TraceCheckUtils]: 13: Hoare triple {5810#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,233 INFO L290 TraceCheckUtils]: 14: Hoare triple {5810#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,233 INFO L290 TraceCheckUtils]: 15: Hoare triple {5810#(= ~waterLevel~0 1)} assume 0 != test_~tmp___1~0#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,233 INFO L272 TraceCheckUtils]: 16: Hoare triple {5810#(= ~waterLevel~0 1)} call timeShift(); {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,233 INFO L290 TraceCheckUtils]: 17: Hoare triple {5810#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,234 INFO L290 TraceCheckUtils]: 18: Hoare triple {5810#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,234 INFO L290 TraceCheckUtils]: 19: Hoare triple {5810#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,234 INFO L272 TraceCheckUtils]: 20: Hoare triple {5810#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {5826#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 21: Hoare triple {5826#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 22: Hoare triple {5808#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 23: Hoare triple {5808#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 24: Hoare triple {5808#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 25: Hoare triple {5808#true} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 26: Hoare triple {5808#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {5808#true} is VALID [2022-02-20 18:11:01,235 INFO L290 TraceCheckUtils]: 27: Hoare triple {5808#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L290 TraceCheckUtils]: 28: Hoare triple {5808#true} assume !(0 != ~tmp~5#1); {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L272 TraceCheckUtils]: 29: Hoare triple {5808#true} call processEnvironment__wrappee__base(); {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L290 TraceCheckUtils]: 30: Hoare triple {5808#true} assume true; {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {5808#true} {5808#true} #242#return; {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L290 TraceCheckUtils]: 32: Hoare triple {5808#true} assume true; {5808#true} is VALID [2022-02-20 18:11:01,236 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {5808#true} {5810#(= ~waterLevel~0 1)} #228#return; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,238 INFO L290 TraceCheckUtils]: 34: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :end_inline_processEnvironment } true; {5810#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:01,239 INFO L290 TraceCheckUtils]: 35: Hoare triple {5810#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {5824#(= |timeShift_getWaterLevel_#res#1| 1)} is VALID [2022-02-20 18:11:01,239 INFO L290 TraceCheckUtils]: 36: Hoare triple {5824#(= |timeShift_getWaterLevel_#res#1| 1)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {5825#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) 0)} is VALID [2022-02-20 18:11:01,240 INFO L290 TraceCheckUtils]: 37: Hoare triple {5825#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {5809#false} is VALID [2022-02-20 18:11:01,240 INFO L290 TraceCheckUtils]: 38: Hoare triple {5809#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {5809#false} is VALID [2022-02-20 18:11:01,240 INFO L290 TraceCheckUtils]: 39: Hoare triple {5809#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {5809#false} is VALID [2022-02-20 18:11:01,240 INFO L290 TraceCheckUtils]: 40: Hoare triple {5809#false} assume !false; {5809#false} is VALID [2022-02-20 18:11:01,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:01,241 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:01,241 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117016848] [2022-02-20 18:11:01,241 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117016848] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:01,241 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:01,241 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:01,242 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1819546087] [2022-02-20 18:11:01,242 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:01,243 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-02-20 18:11:01,243 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:01,243 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:01,264 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,265 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:01,265 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:01,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:01,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:01,266 INFO L87 Difference]: Start difference. First operand 170 states and 205 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:01,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,585 INFO L93 Difference]: Finished difference Result 333 states and 402 transitions. [2022-02-20 18:11:01,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:11:01,585 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-02-20 18:11:01,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:01,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:01,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 222 transitions. [2022-02-20 18:11:01,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:01,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 222 transitions. [2022-02-20 18:11:01,603 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 222 transitions. [2022-02-20 18:11:01,728 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 222 edges. 222 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,742 INFO L225 Difference]: With dead ends: 333 [2022-02-20 18:11:01,742 INFO L226 Difference]: Without dead ends: 170 [2022-02-20 18:11:01,742 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:01,745 INFO L933 BasicCegarLoop]: 77 mSDtfsCounter, 98 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:01,745 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [101 Valid, 314 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:01,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-02-20 18:11:01,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 168. [2022-02-20 18:11:01,755 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:01,756 INFO L82 GeneralOperation]: Start isEquivalent. First operand 170 states. Second operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,763 INFO L74 IsIncluded]: Start isIncluded. First operand 170 states. Second operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,764 INFO L87 Difference]: Start difference. First operand 170 states. Second operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,767 INFO L93 Difference]: Finished difference Result 170 states and 202 transitions. [2022-02-20 18:11:01,767 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 202 transitions. [2022-02-20 18:11:01,768 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,768 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,768 INFO L74 IsIncluded]: Start isIncluded. First operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) Second operand 170 states. [2022-02-20 18:11:01,769 INFO L87 Difference]: Start difference. First operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) Second operand 170 states. [2022-02-20 18:11:01,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,771 INFO L93 Difference]: Finished difference Result 170 states and 202 transitions. [2022-02-20 18:11:01,771 INFO L276 IsEmpty]: Start isEmpty. Operand 170 states and 202 transitions. [2022-02-20 18:11:01,772 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,772 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,772 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:01,772 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:01,773 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 135 states have (on average 1.2296296296296296) internal successors, (166), 143 states have internal predecessors, (166), 15 states have call successors, (15), 15 states have call predecessors, (15), 17 states have return successors, (20), 15 states have call predecessors, (20), 15 states have call successors, (20) [2022-02-20 18:11:01,776 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 201 transitions. [2022-02-20 18:11:01,776 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 201 transitions. Word has length 41 [2022-02-20 18:11:01,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:01,779 INFO L470 AbstractCegarLoop]: Abstraction has 168 states and 201 transitions. [2022-02-20 18:11:01,779 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:01,779 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 201 transitions. [2022-02-20 18:11:01,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-02-20 18:11:01,780 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:01,780 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:01,780 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:11:01,780 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:01,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:01,781 INFO L85 PathProgramCache]: Analyzing trace with hash 1672553323, now seen corresponding path program 1 times [2022-02-20 18:11:01,781 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:01,781 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854076000] [2022-02-20 18:11:01,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:01,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:01,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:01,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,834 INFO L290 TraceCheckUtils]: 0: Hoare triple {6905#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6886#true} is VALID [2022-02-20 18:11:01,834 INFO L290 TraceCheckUtils]: 1: Hoare triple {6886#true} assume true; {6886#true} is VALID [2022-02-20 18:11:01,834 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6886#true} {6886#true} #234#return; {6886#true} is VALID [2022-02-20 18:11:01,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:11:01,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,865 INFO L290 TraceCheckUtils]: 0: Hoare triple {6906#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {6886#true} is VALID [2022-02-20 18:11:01,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {6886#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {6886#true} is VALID [2022-02-20 18:11:01,865 INFO L290 TraceCheckUtils]: 2: Hoare triple {6886#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,866 INFO L290 TraceCheckUtils]: 3: Hoare triple {6902#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,866 INFO L290 TraceCheckUtils]: 4: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,866 INFO L290 TraceCheckUtils]: 5: Hoare triple {6902#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,867 INFO L290 TraceCheckUtils]: 6: Hoare triple {6902#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,867 INFO L290 TraceCheckUtils]: 7: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,867 INFO L290 TraceCheckUtils]: 8: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,867 INFO L290 TraceCheckUtils]: 9: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume true; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,871 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {6902#(<= 2 ~waterLevel~0)} {6886#true} #228#return; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 0: Hoare triple {6886#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6886#true} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 1: Hoare triple {6886#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {6886#true} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 2: Hoare triple {6886#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6886#true} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 3: Hoare triple {6886#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {6886#true} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 4: Hoare triple {6886#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {6886#true} is VALID [2022-02-20 18:11:01,872 INFO L290 TraceCheckUtils]: 5: Hoare triple {6886#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L290 TraceCheckUtils]: 6: Hoare triple {6886#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L290 TraceCheckUtils]: 7: Hoare triple {6886#true} assume !false; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L290 TraceCheckUtils]: 8: Hoare triple {6886#true} assume test_~splverifierCounter~0#1 < 4; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L290 TraceCheckUtils]: 9: Hoare triple {6886#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L290 TraceCheckUtils]: 10: Hoare triple {6886#true} assume 0 != test_~tmp~9#1; {6886#true} is VALID [2022-02-20 18:11:01,873 INFO L272 TraceCheckUtils]: 11: Hoare triple {6886#true} call waterRise(); {6905#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 12: Hoare triple {6905#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 13: Hoare triple {6886#true} assume true; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {6886#true} {6886#true} #234#return; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 15: Hoare triple {6886#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 16: Hoare triple {6886#true} assume !(0 != test_~tmp___0~3#1); {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 17: Hoare triple {6886#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 18: Hoare triple {6886#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {6886#true} is VALID [2022-02-20 18:11:01,874 INFO L290 TraceCheckUtils]: 19: Hoare triple {6886#true} assume 0 != test_~tmp___1~0#1; {6886#true} is VALID [2022-02-20 18:11:01,875 INFO L272 TraceCheckUtils]: 20: Hoare triple {6886#true} call timeShift(); {6886#true} is VALID [2022-02-20 18:11:01,875 INFO L290 TraceCheckUtils]: 21: Hoare triple {6886#true} assume !(0 != ~pumpRunning~0); {6886#true} is VALID [2022-02-20 18:11:01,875 INFO L290 TraceCheckUtils]: 22: Hoare triple {6886#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {6886#true} is VALID [2022-02-20 18:11:01,875 INFO L290 TraceCheckUtils]: 23: Hoare triple {6886#true} assume !(0 != ~pumpRunning~0); {6886#true} is VALID [2022-02-20 18:11:01,875 INFO L272 TraceCheckUtils]: 24: Hoare triple {6886#true} call processEnvironment__wrappee__highWaterSensor(); {6906#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:01,875 INFO L290 TraceCheckUtils]: 25: Hoare triple {6906#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {6886#true} is VALID [2022-02-20 18:11:01,876 INFO L290 TraceCheckUtils]: 26: Hoare triple {6886#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {6886#true} is VALID [2022-02-20 18:11:01,876 INFO L290 TraceCheckUtils]: 27: Hoare triple {6886#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,876 INFO L290 TraceCheckUtils]: 28: Hoare triple {6902#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,877 INFO L290 TraceCheckUtils]: 29: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,877 INFO L290 TraceCheckUtils]: 30: Hoare triple {6902#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,877 INFO L290 TraceCheckUtils]: 31: Hoare triple {6902#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,877 INFO L290 TraceCheckUtils]: 32: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,878 INFO L290 TraceCheckUtils]: 33: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,878 INFO L290 TraceCheckUtils]: 34: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume true; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,878 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {6902#(<= 2 ~waterLevel~0)} {6886#true} #228#return; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,879 INFO L290 TraceCheckUtils]: 36: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {6902#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:01,879 INFO L290 TraceCheckUtils]: 37: Hoare triple {6902#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {6903#(<= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:01,879 INFO L290 TraceCheckUtils]: 38: Hoare triple {6903#(<= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {6904#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} is VALID [2022-02-20 18:11:01,880 INFO L290 TraceCheckUtils]: 39: Hoare triple {6904#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {6887#false} is VALID [2022-02-20 18:11:01,880 INFO L290 TraceCheckUtils]: 40: Hoare triple {6887#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {6887#false} is VALID [2022-02-20 18:11:01,880 INFO L290 TraceCheckUtils]: 41: Hoare triple {6887#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {6887#false} is VALID [2022-02-20 18:11:01,881 INFO L290 TraceCheckUtils]: 42: Hoare triple {6887#false} assume !false; {6887#false} is VALID [2022-02-20 18:11:01,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:01,882 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:01,882 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854076000] [2022-02-20 18:11:01,882 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854076000] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:01,882 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:01,882 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:01,883 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1817252076] [2022-02-20 18:11:01,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:01,883 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 43 [2022-02-20 18:11:01,884 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:01,884 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:01,905 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,905 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:01,905 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:01,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:01,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:01,906 INFO L87 Difference]: Start difference. First operand 168 states and 201 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,550 INFO L93 Difference]: Finished difference Result 379 states and 482 transitions. [2022-02-20 18:11:02,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-20 18:11:02,550 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 43 [2022-02-20 18:11:02,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:02,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 282 transitions. [2022-02-20 18:11:02,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 282 transitions. [2022-02-20 18:11:02,555 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 282 transitions. [2022-02-20 18:11:02,743 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 282 edges. 282 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:02,747 INFO L225 Difference]: With dead ends: 379 [2022-02-20 18:11:02,747 INFO L226 Difference]: Without dead ends: 259 [2022-02-20 18:11:02,748 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:11:02,748 INFO L933 BasicCegarLoop]: 118 mSDtfsCounter, 164 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 248 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 165 SdHoareTripleChecker+Valid, 445 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 248 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:02,749 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [165 Valid, 445 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 248 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:11:02,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-02-20 18:11:02,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 253. [2022-02-20 18:11:02,785 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:02,786 INFO L82 GeneralOperation]: Start isEquivalent. First operand 259 states. Second operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:02,786 INFO L74 IsIncluded]: Start isIncluded. First operand 259 states. Second operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:02,787 INFO L87 Difference]: Start difference. First operand 259 states. Second operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:02,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,792 INFO L93 Difference]: Finished difference Result 259 states and 316 transitions. [2022-02-20 18:11:02,793 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 316 transitions. [2022-02-20 18:11:02,794 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:02,794 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:02,794 INFO L74 IsIncluded]: Start isIncluded. First operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) Second operand 259 states. [2022-02-20 18:11:02,795 INFO L87 Difference]: Start difference. First operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) Second operand 259 states. [2022-02-20 18:11:02,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,800 INFO L93 Difference]: Finished difference Result 259 states and 316 transitions. [2022-02-20 18:11:02,800 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 316 transitions. [2022-02-20 18:11:02,800 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:02,800 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:02,801 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:02,801 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:02,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 202 states have (on average 1.2277227722772277) internal successors, (248), 215 states have internal predecessors, (248), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:02,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 313 transitions. [2022-02-20 18:11:02,806 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 313 transitions. Word has length 43 [2022-02-20 18:11:02,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:02,806 INFO L470 AbstractCegarLoop]: Abstraction has 253 states and 313 transitions. [2022-02-20 18:11:02,807 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,807 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 313 transitions. [2022-02-20 18:11:02,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:11:02,807 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:02,807 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:02,807 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:11:02,808 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:02,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:02,808 INFO L85 PathProgramCache]: Analyzing trace with hash -422364352, now seen corresponding path program 1 times [2022-02-20 18:11:02,808 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:02,808 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116823712] [2022-02-20 18:11:02,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:02,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:02,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:02,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,869 INFO L290 TraceCheckUtils]: 0: Hoare triple {8355#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8334#true} is VALID [2022-02-20 18:11:02,869 INFO L290 TraceCheckUtils]: 1: Hoare triple {8334#true} assume true; {8334#true} is VALID [2022-02-20 18:11:02,870 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8334#true} {8336#(= ~pumpRunning~0 0)} #234#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:11:02,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:02,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,894 INFO L290 TraceCheckUtils]: 0: Hoare triple {8334#true} assume true; {8334#true} is VALID [2022-02-20 18:11:02,894 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {8334#true} {8336#(= ~pumpRunning~0 0)} #242#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,895 INFO L290 TraceCheckUtils]: 0: Hoare triple {8356#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {8334#true} is VALID [2022-02-20 18:11:02,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {8334#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {8336#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,896 INFO L290 TraceCheckUtils]: 3: Hoare triple {8336#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,896 INFO L290 TraceCheckUtils]: 4: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,896 INFO L290 TraceCheckUtils]: 5: Hoare triple {8336#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,896 INFO L290 TraceCheckUtils]: 6: Hoare triple {8336#(= ~pumpRunning~0 0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,898 INFO L290 TraceCheckUtils]: 7: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~5#1); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,898 INFO L272 TraceCheckUtils]: 8: Hoare triple {8336#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {8334#true} is VALID [2022-02-20 18:11:02,898 INFO L290 TraceCheckUtils]: 9: Hoare triple {8334#true} assume true; {8334#true} is VALID [2022-02-20 18:11:02,898 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {8334#true} {8336#(= ~pumpRunning~0 0)} #242#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,899 INFO L290 TraceCheckUtils]: 11: Hoare triple {8336#(= ~pumpRunning~0 0)} assume true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,899 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {8336#(= ~pumpRunning~0 0)} {8336#(= ~pumpRunning~0 0)} #228#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,899 INFO L290 TraceCheckUtils]: 0: Hoare triple {8334#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,900 INFO L290 TraceCheckUtils]: 1: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,900 INFO L290 TraceCheckUtils]: 2: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,900 INFO L290 TraceCheckUtils]: 3: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,900 INFO L290 TraceCheckUtils]: 4: Hoare triple {8336#(= ~pumpRunning~0 0)} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,901 INFO L290 TraceCheckUtils]: 5: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,901 INFO L290 TraceCheckUtils]: 6: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,901 INFO L290 TraceCheckUtils]: 7: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !false; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,901 INFO L290 TraceCheckUtils]: 8: Hoare triple {8336#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,902 INFO L290 TraceCheckUtils]: 9: Hoare triple {8336#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,902 INFO L290 TraceCheckUtils]: 10: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != test_~tmp~9#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,902 INFO L272 TraceCheckUtils]: 11: Hoare triple {8336#(= ~pumpRunning~0 0)} call waterRise(); {8355#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:02,902 INFO L290 TraceCheckUtils]: 12: Hoare triple {8355#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8334#true} is VALID [2022-02-20 18:11:02,903 INFO L290 TraceCheckUtils]: 13: Hoare triple {8334#true} assume true; {8334#true} is VALID [2022-02-20 18:11:02,903 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {8334#true} {8336#(= ~pumpRunning~0 0)} #234#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,903 INFO L290 TraceCheckUtils]: 15: Hoare triple {8336#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,903 INFO L290 TraceCheckUtils]: 16: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,904 INFO L290 TraceCheckUtils]: 17: Hoare triple {8336#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,904 INFO L290 TraceCheckUtils]: 18: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,904 INFO L290 TraceCheckUtils]: 19: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,904 INFO L272 TraceCheckUtils]: 20: Hoare triple {8336#(= ~pumpRunning~0 0)} call timeShift(); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,905 INFO L290 TraceCheckUtils]: 21: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,905 INFO L290 TraceCheckUtils]: 22: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,905 INFO L290 TraceCheckUtils]: 23: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,906 INFO L272 TraceCheckUtils]: 24: Hoare triple {8336#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {8356#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:02,906 INFO L290 TraceCheckUtils]: 25: Hoare triple {8356#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {8334#true} is VALID [2022-02-20 18:11:02,906 INFO L290 TraceCheckUtils]: 26: Hoare triple {8334#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,906 INFO L290 TraceCheckUtils]: 27: Hoare triple {8336#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,906 INFO L290 TraceCheckUtils]: 28: Hoare triple {8336#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,907 INFO L290 TraceCheckUtils]: 29: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~7#1;isHighWaterLevel_~tmp___0~1#1 := 0; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,907 INFO L290 TraceCheckUtils]: 30: Hoare triple {8336#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,907 INFO L290 TraceCheckUtils]: 31: Hoare triple {8336#(= ~pumpRunning~0 0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,907 INFO L290 TraceCheckUtils]: 32: Hoare triple {8336#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~5#1); {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,907 INFO L272 TraceCheckUtils]: 33: Hoare triple {8336#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {8334#true} is VALID [2022-02-20 18:11:02,907 INFO L290 TraceCheckUtils]: 34: Hoare triple {8334#true} assume true; {8334#true} is VALID [2022-02-20 18:11:02,908 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {8334#true} {8336#(= ~pumpRunning~0 0)} #242#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,908 INFO L290 TraceCheckUtils]: 36: Hoare triple {8336#(= ~pumpRunning~0 0)} assume true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,908 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {8336#(= ~pumpRunning~0 0)} {8336#(= ~pumpRunning~0 0)} #228#return; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,909 INFO L290 TraceCheckUtils]: 38: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,909 INFO L290 TraceCheckUtils]: 39: Hoare triple {8336#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,909 INFO L290 TraceCheckUtils]: 40: Hoare triple {8336#(= ~pumpRunning~0 0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {8336#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:02,909 INFO L290 TraceCheckUtils]: 41: Hoare triple {8336#(= ~pumpRunning~0 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {8353#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:11:02,910 INFO L290 TraceCheckUtils]: 42: Hoare triple {8353#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {8354#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:02,910 INFO L290 TraceCheckUtils]: 43: Hoare triple {8354#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {8335#false} is VALID [2022-02-20 18:11:02,910 INFO L290 TraceCheckUtils]: 44: Hoare triple {8335#false} assume !false; {8335#false} is VALID [2022-02-20 18:11:02,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:02,910 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:02,910 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116823712] [2022-02-20 18:11:02,910 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [116823712] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:02,910 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:02,910 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:02,911 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1973248494] [2022-02-20 18:11:02,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:02,911 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 45 [2022-02-20 18:11:02,911 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:02,911 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:11:02,937 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:02,937 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:02,937 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:02,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:02,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:02,938 INFO L87 Difference]: Start difference. First operand 253 states and 313 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:11:03,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,548 INFO L93 Difference]: Finished difference Result 272 states and 333 transitions. [2022-02-20 18:11:03,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-02-20 18:11:03,549 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 45 [2022-02-20 18:11:03,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:03,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:11:03,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 203 transitions. [2022-02-20 18:11:03,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:11:03,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 203 transitions. [2022-02-20 18:11:03,554 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 17 states and 203 transitions. [2022-02-20 18:11:03,685 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 203 edges. 203 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:03,690 INFO L225 Difference]: With dead ends: 272 [2022-02-20 18:11:03,691 INFO L226 Difference]: Without dead ends: 270 [2022-02-20 18:11:03,691 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:03,692 INFO L933 BasicCegarLoop]: 88 mSDtfsCounter, 173 mSDsluCounter, 290 mSDsCounter, 0 mSdLazyCounter, 221 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 221 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:03,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [174 Valid, 378 Invalid, 259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 221 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:11:03,693 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-02-20 18:11:03,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 253. [2022-02-20 18:11:03,721 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:03,722 INFO L82 GeneralOperation]: Start isEquivalent. First operand 270 states. Second operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:03,722 INFO L74 IsIncluded]: Start isIncluded. First operand 270 states. Second operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:03,723 INFO L87 Difference]: Start difference. First operand 270 states. Second operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:03,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,729 INFO L93 Difference]: Finished difference Result 270 states and 329 transitions. [2022-02-20 18:11:03,729 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 329 transitions. [2022-02-20 18:11:03,731 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:03,731 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:03,732 INFO L74 IsIncluded]: Start isIncluded. First operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) Second operand 270 states. [2022-02-20 18:11:03,732 INFO L87 Difference]: Start difference. First operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) Second operand 270 states. [2022-02-20 18:11:03,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,738 INFO L93 Difference]: Finished difference Result 270 states and 329 transitions. [2022-02-20 18:11:03,738 INFO L276 IsEmpty]: Start isEmpty. Operand 270 states and 329 transitions. [2022-02-20 18:11:03,739 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:03,739 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:03,739 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:03,739 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:03,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 202 states have (on average 1.2128712871287128) internal successors, (245), 215 states have internal predecessors, (245), 24 states have call successors, (24), 23 states have call predecessors, (24), 26 states have return successors, (41), 24 states have call predecessors, (41), 24 states have call successors, (41) [2022-02-20 18:11:03,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 310 transitions. [2022-02-20 18:11:03,746 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 310 transitions. Word has length 45 [2022-02-20 18:11:03,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:03,746 INFO L470 AbstractCegarLoop]: Abstraction has 253 states and 310 transitions. [2022-02-20 18:11:03,747 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:11:03,747 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 310 transitions. [2022-02-20 18:11:03,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2022-02-20 18:11:03,748 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:03,748 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:03,748 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-02-20 18:11:03,748 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:03,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:03,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1050725005, now seen corresponding path program 1 times [2022-02-20 18:11:03,749 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:03,749 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2120597186] [2022-02-20 18:11:03,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:03,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:03,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:03,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,841 INFO L290 TraceCheckUtils]: 0: Hoare triple {9705#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9667#true} is VALID [2022-02-20 18:11:03,841 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,842 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9667#true} {9667#true} #234#return; {9667#true} is VALID [2022-02-20 18:11:03,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:03,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:03,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:03,879 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9667#true} is VALID [2022-02-20 18:11:03,879 INFO L290 TraceCheckUtils]: 2: Hoare triple {9667#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,880 INFO L290 TraceCheckUtils]: 3: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,880 INFO L290 TraceCheckUtils]: 4: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,880 INFO L290 TraceCheckUtils]: 5: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,880 INFO L290 TraceCheckUtils]: 6: Hoare triple {9694#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,881 INFO L290 TraceCheckUtils]: 7: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,881 INFO L290 TraceCheckUtils]: 8: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,882 INFO L290 TraceCheckUtils]: 9: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,882 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #228#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,882 INFO L290 TraceCheckUtils]: 0: Hoare triple {9706#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,882 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9667#true} is VALID [2022-02-20 18:11:03,882 INFO L290 TraceCheckUtils]: 2: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,883 INFO L272 TraceCheckUtils]: 3: Hoare triple {9667#true} call processEnvironment__wrappee__highWaterSensor(); {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:03,883 INFO L290 TraceCheckUtils]: 4: Hoare triple {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:03,883 INFO L290 TraceCheckUtils]: 5: Hoare triple {9667#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9667#true} is VALID [2022-02-20 18:11:03,883 INFO L290 TraceCheckUtils]: 6: Hoare triple {9667#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,884 INFO L290 TraceCheckUtils]: 7: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,884 INFO L290 TraceCheckUtils]: 8: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,884 INFO L290 TraceCheckUtils]: 9: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,884 INFO L290 TraceCheckUtils]: 10: Hoare triple {9694#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,885 INFO L290 TraceCheckUtils]: 11: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,885 INFO L290 TraceCheckUtils]: 12: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,885 INFO L290 TraceCheckUtils]: 13: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,885 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #228#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,886 INFO L290 TraceCheckUtils]: 15: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,886 INFO L290 TraceCheckUtils]: 16: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,886 INFO L290 TraceCheckUtils]: 17: Hoare triple {9694#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,887 INFO L290 TraceCheckUtils]: 18: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,887 INFO L290 TraceCheckUtils]: 19: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,887 INFO L290 TraceCheckUtils]: 20: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,887 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #238#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-02-20 18:11:03,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:03,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,893 INFO L290 TraceCheckUtils]: 0: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {9667#true} {9667#true} #244#return; {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L290 TraceCheckUtils]: 0: Hoare triple {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume !(0 == ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L272 TraceCheckUtils]: 2: Hoare triple {9667#true} call processEnvironment__wrappee__base(); {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L290 TraceCheckUtils]: 3: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,893 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {9667#true} {9667#true} #244#return; {9667#true} is VALID [2022-02-20 18:11:03,894 INFO L290 TraceCheckUtils]: 5: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,894 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {9667#true} {9695#(<= 1 ~waterLevel~0)} #226#return; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,894 INFO L290 TraceCheckUtils]: 0: Hoare triple {9667#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 2: Hoare triple {9667#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 3: Hoare triple {9667#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 4: Hoare triple {9667#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 5: Hoare triple {9667#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 6: Hoare triple {9667#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 7: Hoare triple {9667#true} assume !false; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 8: Hoare triple {9667#true} assume test_~splverifierCounter~0#1 < 4; {9667#true} is VALID [2022-02-20 18:11:03,895 INFO L290 TraceCheckUtils]: 9: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9667#true} is VALID [2022-02-20 18:11:03,896 INFO L290 TraceCheckUtils]: 10: Hoare triple {9667#true} assume 0 != test_~tmp~9#1; {9667#true} is VALID [2022-02-20 18:11:03,896 INFO L272 TraceCheckUtils]: 11: Hoare triple {9667#true} call waterRise(); {9705#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:03,896 INFO L290 TraceCheckUtils]: 12: Hoare triple {9705#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9667#true} is VALID [2022-02-20 18:11:03,896 INFO L290 TraceCheckUtils]: 13: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,896 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9667#true} {9667#true} #234#return; {9667#true} is VALID [2022-02-20 18:11:03,896 INFO L290 TraceCheckUtils]: 15: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9667#true} is VALID [2022-02-20 18:11:03,897 INFO L290 TraceCheckUtils]: 16: Hoare triple {9667#true} assume !(0 != test_~tmp___0~3#1); {9667#true} is VALID [2022-02-20 18:11:03,897 INFO L290 TraceCheckUtils]: 17: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9667#true} is VALID [2022-02-20 18:11:03,897 INFO L290 TraceCheckUtils]: 18: Hoare triple {9667#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9667#true} is VALID [2022-02-20 18:11:03,897 INFO L290 TraceCheckUtils]: 19: Hoare triple {9667#true} assume 0 != test_~tmp___1~0#1; {9667#true} is VALID [2022-02-20 18:11:03,897 INFO L272 TraceCheckUtils]: 20: Hoare triple {9667#true} call timeShift(); {9706#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:03,897 INFO L290 TraceCheckUtils]: 21: Hoare triple {9706#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,911 INFO L290 TraceCheckUtils]: 22: Hoare triple {9667#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9667#true} is VALID [2022-02-20 18:11:03,911 INFO L290 TraceCheckUtils]: 23: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,912 INFO L272 TraceCheckUtils]: 24: Hoare triple {9667#true} call processEnvironment__wrappee__highWaterSensor(); {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:03,912 INFO L290 TraceCheckUtils]: 25: Hoare triple {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:03,912 INFO L290 TraceCheckUtils]: 26: Hoare triple {9667#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9667#true} is VALID [2022-02-20 18:11:03,912 INFO L290 TraceCheckUtils]: 27: Hoare triple {9667#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,912 INFO L290 TraceCheckUtils]: 28: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,913 INFO L290 TraceCheckUtils]: 29: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,913 INFO L290 TraceCheckUtils]: 30: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,914 INFO L290 TraceCheckUtils]: 31: Hoare triple {9694#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,914 INFO L290 TraceCheckUtils]: 32: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,914 INFO L290 TraceCheckUtils]: 33: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,914 INFO L290 TraceCheckUtils]: 34: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,915 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #228#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,915 INFO L290 TraceCheckUtils]: 36: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,915 INFO L290 TraceCheckUtils]: 37: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,916 INFO L290 TraceCheckUtils]: 38: Hoare triple {9694#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,916 INFO L290 TraceCheckUtils]: 39: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,916 INFO L290 TraceCheckUtils]: 40: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,917 INFO L290 TraceCheckUtils]: 41: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,920 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #238#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,920 INFO L290 TraceCheckUtils]: 43: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !false; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,920 INFO L290 TraceCheckUtils]: 44: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,921 INFO L290 TraceCheckUtils]: 45: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,921 INFO L290 TraceCheckUtils]: 46: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,921 INFO L290 TraceCheckUtils]: 47: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,921 INFO L290 TraceCheckUtils]: 48: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,922 INFO L290 TraceCheckUtils]: 49: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,922 INFO L290 TraceCheckUtils]: 50: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,922 INFO L290 TraceCheckUtils]: 51: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,923 INFO L272 TraceCheckUtils]: 52: Hoare triple {9694#(<= 2 ~waterLevel~0)} call timeShift(); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,923 INFO L290 TraceCheckUtils]: 53: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,923 INFO L290 TraceCheckUtils]: 54: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,924 INFO L290 TraceCheckUtils]: 55: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,924 INFO L290 TraceCheckUtils]: 56: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,924 INFO L290 TraceCheckUtils]: 57: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,925 INFO L290 TraceCheckUtils]: 58: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,925 INFO L290 TraceCheckUtils]: 59: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,926 INFO L290 TraceCheckUtils]: 60: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,926 INFO L290 TraceCheckUtils]: 61: Hoare triple {9695#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,927 INFO L290 TraceCheckUtils]: 62: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6#1); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,927 INFO L272 TraceCheckUtils]: 63: Hoare triple {9695#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:03,927 INFO L290 TraceCheckUtils]: 64: Hoare triple {9718#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:03,927 INFO L290 TraceCheckUtils]: 65: Hoare triple {9667#true} assume !(0 == ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:03,927 INFO L272 TraceCheckUtils]: 66: Hoare triple {9667#true} call processEnvironment__wrappee__base(); {9667#true} is VALID [2022-02-20 18:11:03,927 INFO L290 TraceCheckUtils]: 67: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,928 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {9667#true} {9667#true} #244#return; {9667#true} is VALID [2022-02-20 18:11:03,928 INFO L290 TraceCheckUtils]: 69: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:03,928 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {9667#true} {9695#(<= 1 ~waterLevel~0)} #226#return; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,928 INFO L290 TraceCheckUtils]: 71: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,929 INFO L290 TraceCheckUtils]: 72: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:03,929 INFO L290 TraceCheckUtils]: 73: Hoare triple {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} is VALID [2022-02-20 18:11:03,929 INFO L290 TraceCheckUtils]: 74: Hoare triple {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {9668#false} is VALID [2022-02-20 18:11:03,929 INFO L290 TraceCheckUtils]: 75: Hoare triple {9668#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {9668#false} is VALID [2022-02-20 18:11:03,929 INFO L290 TraceCheckUtils]: 76: Hoare triple {9668#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9668#false} is VALID [2022-02-20 18:11:03,930 INFO L290 TraceCheckUtils]: 77: Hoare triple {9668#false} assume !false; {9668#false} is VALID [2022-02-20 18:11:03,931 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-02-20 18:11:03,931 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:03,931 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2120597186] [2022-02-20 18:11:03,931 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2120597186] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:03,931 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [886903844] [2022-02-20 18:11:03,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:03,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:03,932 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:03,933 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:03,967 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:11:04,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,031 INFO L263 TraceCheckSpWp]: Trace formula consists of 431 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:11:04,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,060 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:04,424 INFO L290 TraceCheckUtils]: 0: Hoare triple {9667#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9667#true} is VALID [2022-02-20 18:11:04,424 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 2: Hoare triple {9667#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 3: Hoare triple {9667#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 4: Hoare triple {9667#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 5: Hoare triple {9667#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 6: Hoare triple {9667#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 7: Hoare triple {9667#true} assume !false; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 8: Hoare triple {9667#true} assume test_~splverifierCounter~0#1 < 4; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 9: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 10: Hoare triple {9667#true} assume 0 != test_~tmp~9#1; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L272 TraceCheckUtils]: 11: Hoare triple {9667#true} call waterRise(); {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 12: Hoare triple {9667#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 13: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9667#true} {9667#true} #234#return; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 15: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9667#true} is VALID [2022-02-20 18:11:04,427 INFO L290 TraceCheckUtils]: 16: Hoare triple {9667#true} assume !(0 != test_~tmp___0~3#1); {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 17: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 18: Hoare triple {9667#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 19: Hoare triple {9667#true} assume 0 != test_~tmp___1~0#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L272 TraceCheckUtils]: 20: Hoare triple {9667#true} call timeShift(); {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 21: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 22: Hoare triple {9667#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 23: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L272 TraceCheckUtils]: 24: Hoare triple {9667#true} call processEnvironment__wrappee__highWaterSensor(); {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 25: Hoare triple {9667#true} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 26: Hoare triple {9667#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9667#true} is VALID [2022-02-20 18:11:04,428 INFO L290 TraceCheckUtils]: 27: Hoare triple {9667#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,429 INFO L290 TraceCheckUtils]: 28: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,429 INFO L290 TraceCheckUtils]: 29: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,429 INFO L290 TraceCheckUtils]: 30: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,429 INFO L290 TraceCheckUtils]: 31: Hoare triple {9694#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,430 INFO L290 TraceCheckUtils]: 32: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,430 INFO L290 TraceCheckUtils]: 33: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,430 INFO L290 TraceCheckUtils]: 34: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,431 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #228#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,431 INFO L290 TraceCheckUtils]: 36: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,431 INFO L290 TraceCheckUtils]: 37: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,431 INFO L290 TraceCheckUtils]: 38: Hoare triple {9694#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,432 INFO L290 TraceCheckUtils]: 39: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,432 INFO L290 TraceCheckUtils]: 40: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,432 INFO L290 TraceCheckUtils]: 41: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,432 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #238#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,433 INFO L290 TraceCheckUtils]: 43: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !false; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,433 INFO L290 TraceCheckUtils]: 44: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,433 INFO L290 TraceCheckUtils]: 45: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,433 INFO L290 TraceCheckUtils]: 46: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,434 INFO L290 TraceCheckUtils]: 47: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,434 INFO L290 TraceCheckUtils]: 48: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,434 INFO L290 TraceCheckUtils]: 49: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,434 INFO L290 TraceCheckUtils]: 50: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,434 INFO L290 TraceCheckUtils]: 51: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,435 INFO L272 TraceCheckUtils]: 52: Hoare triple {9694#(<= 2 ~waterLevel~0)} call timeShift(); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,435 INFO L290 TraceCheckUtils]: 53: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,435 INFO L290 TraceCheckUtils]: 54: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,436 INFO L290 TraceCheckUtils]: 55: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,436 INFO L290 TraceCheckUtils]: 56: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,436 INFO L290 TraceCheckUtils]: 57: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,436 INFO L290 TraceCheckUtils]: 58: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,437 INFO L290 TraceCheckUtils]: 59: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,437 INFO L290 TraceCheckUtils]: 60: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,437 INFO L290 TraceCheckUtils]: 61: Hoare triple {9695#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,437 INFO L290 TraceCheckUtils]: 62: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6#1); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,438 INFO L272 TraceCheckUtils]: 63: Hoare triple {9695#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,438 INFO L290 TraceCheckUtils]: 64: Hoare triple {9695#(<= 1 ~waterLevel~0)} havoc ~tmp~5#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,438 INFO L290 TraceCheckUtils]: 65: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,438 INFO L272 TraceCheckUtils]: 66: Hoare triple {9695#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__base(); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,439 INFO L290 TraceCheckUtils]: 67: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,439 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {9695#(<= 1 ~waterLevel~0)} {9695#(<= 1 ~waterLevel~0)} #244#return; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,439 INFO L290 TraceCheckUtils]: 69: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,439 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {9695#(<= 1 ~waterLevel~0)} {9695#(<= 1 ~waterLevel~0)} #226#return; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,440 INFO L290 TraceCheckUtils]: 71: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,440 INFO L290 TraceCheckUtils]: 72: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:04,440 INFO L290 TraceCheckUtils]: 73: Hoare triple {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} is VALID [2022-02-20 18:11:04,441 INFO L290 TraceCheckUtils]: 74: Hoare triple {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {9668#false} is VALID [2022-02-20 18:11:04,441 INFO L290 TraceCheckUtils]: 75: Hoare triple {9668#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {9668#false} is VALID [2022-02-20 18:11:04,441 INFO L290 TraceCheckUtils]: 76: Hoare triple {9668#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9668#false} is VALID [2022-02-20 18:11:04,441 INFO L290 TraceCheckUtils]: 77: Hoare triple {9668#false} assume !false; {9668#false} is VALID [2022-02-20 18:11:04,441 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:04,441 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:11:04,713 INFO L290 TraceCheckUtils]: 77: Hoare triple {9668#false} assume !false; {9668#false} is VALID [2022-02-20 18:11:04,713 INFO L290 TraceCheckUtils]: 76: Hoare triple {9668#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9668#false} is VALID [2022-02-20 18:11:04,713 INFO L290 TraceCheckUtils]: 75: Hoare triple {9668#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {9668#false} is VALID [2022-02-20 18:11:04,713 INFO L290 TraceCheckUtils]: 74: Hoare triple {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {9668#false} is VALID [2022-02-20 18:11:04,714 INFO L290 TraceCheckUtils]: 73: Hoare triple {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9704#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|)} is VALID [2022-02-20 18:11:04,714 INFO L290 TraceCheckUtils]: 72: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9703#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:04,714 INFO L290 TraceCheckUtils]: 71: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,714 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {9667#true} {9695#(<= 1 ~waterLevel~0)} #226#return; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 69: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {9667#true} {9667#true} #244#return; {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 67: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L272 TraceCheckUtils]: 66: Hoare triple {9667#true} call processEnvironment__wrappee__base(); {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 65: Hoare triple {9667#true} assume !(0 == ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 64: Hoare triple {9667#true} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L272 TraceCheckUtils]: 63: Hoare triple {9695#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {9667#true} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 62: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6#1); {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,715 INFO L290 TraceCheckUtils]: 61: Hoare triple {9695#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,716 INFO L290 TraceCheckUtils]: 60: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,716 INFO L290 TraceCheckUtils]: 59: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,716 INFO L290 TraceCheckUtils]: 58: Hoare triple {9695#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,716 INFO L290 TraceCheckUtils]: 57: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,717 INFO L290 TraceCheckUtils]: 56: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,717 INFO L290 TraceCheckUtils]: 55: Hoare triple {9695#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,717 INFO L290 TraceCheckUtils]: 54: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9695#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,717 INFO L290 TraceCheckUtils]: 53: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,718 INFO L272 TraceCheckUtils]: 52: Hoare triple {9694#(<= 2 ~waterLevel~0)} call timeShift(); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,718 INFO L290 TraceCheckUtils]: 51: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,718 INFO L290 TraceCheckUtils]: 50: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,718 INFO L290 TraceCheckUtils]: 49: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,719 INFO L290 TraceCheckUtils]: 48: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,719 INFO L290 TraceCheckUtils]: 47: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,719 INFO L290 TraceCheckUtils]: 46: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,719 INFO L290 TraceCheckUtils]: 45: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,720 INFO L290 TraceCheckUtils]: 44: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,720 INFO L290 TraceCheckUtils]: 43: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !false; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,720 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #238#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,720 INFO L290 TraceCheckUtils]: 41: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,721 INFO L290 TraceCheckUtils]: 40: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,721 INFO L290 TraceCheckUtils]: 39: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,721 INFO L290 TraceCheckUtils]: 38: Hoare triple {9694#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,721 INFO L290 TraceCheckUtils]: 37: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,722 INFO L290 TraceCheckUtils]: 36: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,722 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {9694#(<= 2 ~waterLevel~0)} {9667#true} #228#return; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,722 INFO L290 TraceCheckUtils]: 34: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,722 INFO L290 TraceCheckUtils]: 33: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,723 INFO L290 TraceCheckUtils]: 32: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,723 INFO L290 TraceCheckUtils]: 31: Hoare triple {9694#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,723 INFO L290 TraceCheckUtils]: 30: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,723 INFO L290 TraceCheckUtils]: 29: Hoare triple {9694#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,723 INFO L290 TraceCheckUtils]: 28: Hoare triple {9694#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 27: Hoare triple {9667#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {9694#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 26: Hoare triple {9667#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 25: Hoare triple {9667#true} havoc ~tmp~5#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L272 TraceCheckUtils]: 24: Hoare triple {9667#true} call processEnvironment__wrappee__highWaterSensor(); {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 23: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 22: Hoare triple {9667#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 21: Hoare triple {9667#true} assume !(0 != ~pumpRunning~0); {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L272 TraceCheckUtils]: 20: Hoare triple {9667#true} call timeShift(); {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 19: Hoare triple {9667#true} assume 0 != test_~tmp___1~0#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 18: Hoare triple {9667#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 17: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 16: Hoare triple {9667#true} assume !(0 != test_~tmp___0~3#1); {9667#true} is VALID [2022-02-20 18:11:04,724 INFO L290 TraceCheckUtils]: 15: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {9667#true} {9667#true} #234#return; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 13: Hoare triple {9667#true} assume true; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 12: Hoare triple {9667#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L272 TraceCheckUtils]: 11: Hoare triple {9667#true} call waterRise(); {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 10: Hoare triple {9667#true} assume 0 != test_~tmp~9#1; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 9: Hoare triple {9667#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 8: Hoare triple {9667#true} assume test_~splverifierCounter~0#1 < 4; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 7: Hoare triple {9667#true} assume !false; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 6: Hoare triple {9667#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 5: Hoare triple {9667#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 4: Hoare triple {9667#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 3: Hoare triple {9667#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 2: Hoare triple {9667#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 1: Hoare triple {9667#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {9667#true} is VALID [2022-02-20 18:11:04,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {9667#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9667#true} is VALID [2022-02-20 18:11:04,726 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-02-20 18:11:04,726 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [886903844] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:11:04,726 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:11:04,726 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-02-20 18:11:04,726 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277432698] [2022-02-20 18:11:04,726 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:11:04,727 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 78 [2022-02-20 18:11:04,728 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:04,728 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:04,775 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 92 edges. 92 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:04,776 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-20 18:11:04,776 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:04,776 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-20 18:11:04,776 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:04,776 INFO L87 Difference]: Start difference. First operand 253 states and 310 transitions. Second operand has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:05,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:05,845 INFO L93 Difference]: Finished difference Result 586 states and 754 transitions. [2022-02-20 18:11:05,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-02-20 18:11:05,845 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 78 [2022-02-20 18:11:05,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:05,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:05,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 365 transitions. [2022-02-20 18:11:05,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:05,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 365 transitions. [2022-02-20 18:11:05,851 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 22 states and 365 transitions. [2022-02-20 18:11:06,075 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:06,083 INFO L225 Difference]: With dead ends: 586 [2022-02-20 18:11:06,084 INFO L226 Difference]: Without dead ends: 381 [2022-02-20 18:11:06,084 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 166 SyntacticMatches, 4 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 107 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-02-20 18:11:06,085 INFO L933 BasicCegarLoop]: 121 mSDtfsCounter, 352 mSDsluCounter, 375 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 356 SdHoareTripleChecker+Valid, 496 SdHoareTripleChecker+Invalid, 450 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:06,085 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [356 Valid, 496 Invalid, 450 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:06,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2022-02-20 18:11:06,142 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 348. [2022-02-20 18:11:06,143 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:06,143 INFO L82 GeneralOperation]: Start isEquivalent. First operand 381 states. Second operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2022-02-20 18:11:06,144 INFO L74 IsIncluded]: Start isIncluded. First operand 381 states. Second operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2022-02-20 18:11:06,145 INFO L87 Difference]: Start difference. First operand 381 states. Second operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2022-02-20 18:11:06,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:06,153 INFO L93 Difference]: Finished difference Result 381 states and 479 transitions. [2022-02-20 18:11:06,153 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 479 transitions. [2022-02-20 18:11:06,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:06,154 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:06,154 INFO L74 IsIncluded]: Start isIncluded. First operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) Second operand 381 states. [2022-02-20 18:11:06,155 INFO L87 Difference]: Start difference. First operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) Second operand 381 states. [2022-02-20 18:11:06,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:06,163 INFO L93 Difference]: Finished difference Result 381 states and 479 transitions. [2022-02-20 18:11:06,163 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 479 transitions. [2022-02-20 18:11:06,163 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:06,163 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:06,163 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:06,163 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:06,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 276 states have (on average 1.213768115942029) internal successors, (335), 294 states have internal predecessors, (335), 34 states have call successors, (34), 33 states have call predecessors, (34), 37 states have return successors, (61), 32 states have call predecessors, (61), 34 states have call successors, (61) [2022-02-20 18:11:06,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 430 transitions. [2022-02-20 18:11:06,172 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 430 transitions. Word has length 78 [2022-02-20 18:11:06,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:06,172 INFO L470 AbstractCegarLoop]: Abstraction has 348 states and 430 transitions. [2022-02-20 18:11:06,172 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.11111111111111) internal successors, (73), 6 states have internal predecessors, (73), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:06,172 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 430 transitions. [2022-02-20 18:11:06,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-02-20 18:11:06,173 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:06,173 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:06,205 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:06,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:11:06,387 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:06,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:06,388 INFO L85 PathProgramCache]: Analyzing trace with hash 1937588267, now seen corresponding path program 2 times [2022-02-20 18:11:06,388 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:06,388 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211011957] [2022-02-20 18:11:06,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:06,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:06,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:06,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12299#true} is VALID [2022-02-20 18:11:06,459 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,459 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {12299#true} {12299#true} #234#return; {12299#true} is VALID [2022-02-20 18:11:06,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:06,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:06,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,502 INFO L290 TraceCheckUtils]: 0: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,502 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {12299#true} is VALID [2022-02-20 18:11:06,502 INFO L290 TraceCheckUtils]: 2: Hoare triple {12299#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,502 INFO L290 TraceCheckUtils]: 3: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,503 INFO L290 TraceCheckUtils]: 4: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,503 INFO L290 TraceCheckUtils]: 5: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,503 INFO L290 TraceCheckUtils]: 6: Hoare triple {12326#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,503 INFO L290 TraceCheckUtils]: 7: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,504 INFO L290 TraceCheckUtils]: 8: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,504 INFO L290 TraceCheckUtils]: 9: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,504 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {12326#(<= 2 ~waterLevel~0)} {12299#true} #228#return; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,504 INFO L290 TraceCheckUtils]: 0: Hoare triple {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,504 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12299#true} is VALID [2022-02-20 18:11:06,504 INFO L290 TraceCheckUtils]: 2: Hoare triple {12299#true} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,505 INFO L272 TraceCheckUtils]: 3: Hoare triple {12299#true} call processEnvironment__wrappee__highWaterSensor(); {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:06,505 INFO L290 TraceCheckUtils]: 4: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,505 INFO L290 TraceCheckUtils]: 5: Hoare triple {12299#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {12299#true} is VALID [2022-02-20 18:11:06,505 INFO L290 TraceCheckUtils]: 6: Hoare triple {12299#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,505 INFO L290 TraceCheckUtils]: 7: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,505 INFO L290 TraceCheckUtils]: 8: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,506 INFO L290 TraceCheckUtils]: 9: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,506 INFO L290 TraceCheckUtils]: 10: Hoare triple {12326#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,506 INFO L290 TraceCheckUtils]: 11: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,506 INFO L290 TraceCheckUtils]: 12: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,506 INFO L290 TraceCheckUtils]: 13: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,507 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {12326#(<= 2 ~waterLevel~0)} {12299#true} #228#return; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,507 INFO L290 TraceCheckUtils]: 15: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,507 INFO L290 TraceCheckUtils]: 16: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,507 INFO L290 TraceCheckUtils]: 17: Hoare triple {12326#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,508 INFO L290 TraceCheckUtils]: 18: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,508 INFO L290 TraceCheckUtils]: 19: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,508 INFO L290 TraceCheckUtils]: 20: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,508 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {12326#(<= 2 ~waterLevel~0)} {12299#true} #238#return; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-02-20 18:11:06,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:11:06,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:06,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,595 INFO L290 TraceCheckUtils]: 0: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L290 TraceCheckUtils]: 0: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume !(0 == ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L272 TraceCheckUtils]: 2: Hoare triple {12299#true} call processEnvironment__wrappee__base(); {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L290 TraceCheckUtils]: 3: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L290 TraceCheckUtils]: 5: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,595 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {12299#true} {12376#(<= |old(~waterLevel~0)| 1)} #226#return; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,596 INFO L290 TraceCheckUtils]: 0: Hoare triple {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:06,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,596 INFO L290 TraceCheckUtils]: 2: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,596 INFO L290 TraceCheckUtils]: 3: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,597 INFO L290 TraceCheckUtils]: 4: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {12374#(and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0))) (or (not (= ~waterLevel~0 0)) (<= |old(~waterLevel~0)| 1)))} is VALID [2022-02-20 18:11:06,597 INFO L290 TraceCheckUtils]: 5: Hoare triple {12374#(and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0))) (or (not (= ~waterLevel~0 0)) (<= |old(~waterLevel~0)| 1)))} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {12375#(and (or (and (not (= ~waterLevel~0 0)) (= 0 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|))) (and (= (+ 1 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|)) 0) (= ~waterLevel~0 0))) (or (<= |old(~waterLevel~0)| 1) (<= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} is VALID [2022-02-20 18:11:06,598 INFO L290 TraceCheckUtils]: 6: Hoare triple {12375#(and (or (and (not (= ~waterLevel~0 0)) (= 0 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|))) (and (= (+ 1 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|)) 0) (= ~waterLevel~0 0))) (or (<= |old(~waterLevel~0)| 1) (<= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,598 INFO L290 TraceCheckUtils]: 7: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,598 INFO L290 TraceCheckUtils]: 8: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,599 INFO L290 TraceCheckUtils]: 9: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume !(0 != processEnvironment_~tmp~6#1); {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,599 INFO L272 TraceCheckUtils]: 10: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} call processEnvironment__wrappee__highWaterSensor(); {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:06,599 INFO L290 TraceCheckUtils]: 11: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L290 TraceCheckUtils]: 12: Hoare triple {12299#true} assume !(0 == ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L272 TraceCheckUtils]: 13: Hoare triple {12299#true} call processEnvironment__wrappee__base(); {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L290 TraceCheckUtils]: 14: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L290 TraceCheckUtils]: 16: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,599 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {12299#true} {12376#(<= |old(~waterLevel~0)| 1)} #226#return; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,600 INFO L290 TraceCheckUtils]: 18: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,600 INFO L290 TraceCheckUtils]: 19: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,600 INFO L290 TraceCheckUtils]: 20: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,600 INFO L290 TraceCheckUtils]: 21: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,601 INFO L290 TraceCheckUtils]: 22: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,601 INFO L290 TraceCheckUtils]: 23: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,601 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {12376#(<= |old(~waterLevel~0)| 1)} {12326#(<= 2 ~waterLevel~0)} #238#return; {12300#false} is VALID [2022-02-20 18:11:06,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-02-20 18:11:06,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:06,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume !(0 == ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L272 TraceCheckUtils]: 2: Hoare triple {12299#true} call processEnvironment__wrappee__base(); {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 3: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 5: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {12299#true} {12300#false} #226#return; {12300#false} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {12299#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {12299#true} is VALID [2022-02-20 18:11:06,606 INFO L290 TraceCheckUtils]: 2: Hoare triple {12299#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 3: Hoare triple {12299#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 4: Hoare triple {12299#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 5: Hoare triple {12299#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 6: Hoare triple {12299#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 7: Hoare triple {12299#true} assume !false; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 8: Hoare triple {12299#true} assume test_~splverifierCounter~0#1 < 4; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 9: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 10: Hoare triple {12299#true} assume 0 != test_~tmp~9#1; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L272 TraceCheckUtils]: 11: Hoare triple {12299#true} call waterRise(); {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 12: Hoare triple {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 13: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {12299#true} {12299#true} #234#return; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 15: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12299#true} is VALID [2022-02-20 18:11:06,607 INFO L290 TraceCheckUtils]: 16: Hoare triple {12299#true} assume !(0 != test_~tmp___0~3#1); {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 17: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 18: Hoare triple {12299#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 19: Hoare triple {12299#true} assume 0 != test_~tmp___1~0#1; {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L272 TraceCheckUtils]: 20: Hoare triple {12299#true} call timeShift(); {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 21: Hoare triple {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 22: Hoare triple {12299#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 23: Hoare triple {12299#true} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L272 TraceCheckUtils]: 24: Hoare triple {12299#true} call processEnvironment__wrappee__highWaterSensor(); {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 25: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,608 INFO L290 TraceCheckUtils]: 26: Hoare triple {12299#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {12299#true} is VALID [2022-02-20 18:11:06,609 INFO L290 TraceCheckUtils]: 27: Hoare triple {12299#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,609 INFO L290 TraceCheckUtils]: 28: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,609 INFO L290 TraceCheckUtils]: 29: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,609 INFO L290 TraceCheckUtils]: 30: Hoare triple {12326#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,610 INFO L290 TraceCheckUtils]: 31: Hoare triple {12326#(<= 2 ~waterLevel~0)} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,610 INFO L290 TraceCheckUtils]: 32: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,610 INFO L290 TraceCheckUtils]: 33: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,610 INFO L290 TraceCheckUtils]: 34: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,611 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12326#(<= 2 ~waterLevel~0)} {12299#true} #228#return; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,611 INFO L290 TraceCheckUtils]: 36: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,611 INFO L290 TraceCheckUtils]: 37: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,611 INFO L290 TraceCheckUtils]: 38: Hoare triple {12326#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,611 INFO L290 TraceCheckUtils]: 39: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,612 INFO L290 TraceCheckUtils]: 40: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,612 INFO L290 TraceCheckUtils]: 41: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume true; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,612 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {12326#(<= 2 ~waterLevel~0)} {12299#true} #238#return; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,612 INFO L290 TraceCheckUtils]: 43: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !false; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,613 INFO L290 TraceCheckUtils]: 44: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,613 INFO L290 TraceCheckUtils]: 45: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,613 INFO L290 TraceCheckUtils]: 46: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9#1); {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,613 INFO L290 TraceCheckUtils]: 47: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,613 INFO L290 TraceCheckUtils]: 48: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,614 INFO L290 TraceCheckUtils]: 49: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,614 INFO L290 TraceCheckUtils]: 50: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,614 INFO L290 TraceCheckUtils]: 51: Hoare triple {12326#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0#1; {12326#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:06,614 INFO L272 TraceCheckUtils]: 52: Hoare triple {12326#(<= 2 ~waterLevel~0)} call timeShift(); {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:06,615 INFO L290 TraceCheckUtils]: 53: Hoare triple {12360#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:06,615 INFO L290 TraceCheckUtils]: 54: Hoare triple {12359#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,615 INFO L290 TraceCheckUtils]: 55: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,615 INFO L290 TraceCheckUtils]: 56: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:06,616 INFO L290 TraceCheckUtils]: 57: Hoare triple {12373#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {12374#(and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0))) (or (not (= ~waterLevel~0 0)) (<= |old(~waterLevel~0)| 1)))} is VALID [2022-02-20 18:11:06,617 INFO L290 TraceCheckUtils]: 58: Hoare triple {12374#(and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0))) (or (not (= ~waterLevel~0 0)) (<= |old(~waterLevel~0)| 1)))} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {12375#(and (or (and (not (= ~waterLevel~0 0)) (= 0 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|))) (and (= (+ 1 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|)) 0) (= ~waterLevel~0 0))) (or (<= |old(~waterLevel~0)| 1) (<= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} is VALID [2022-02-20 18:11:06,617 INFO L290 TraceCheckUtils]: 59: Hoare triple {12375#(and (or (and (not (= ~waterLevel~0 0)) (= 0 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|))) (and (= (+ 1 (* (- 1) |timeShift_isLowWaterLevel_~tmp~8#1|)) 0) (= ~waterLevel~0 0))) (or (<= |old(~waterLevel~0)| 1) (<= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,617 INFO L290 TraceCheckUtils]: 60: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,617 INFO L290 TraceCheckUtils]: 61: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,618 INFO L290 TraceCheckUtils]: 62: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume !(0 != processEnvironment_~tmp~6#1); {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,618 INFO L272 TraceCheckUtils]: 63: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} call processEnvironment__wrappee__highWaterSensor(); {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:06,618 INFO L290 TraceCheckUtils]: 64: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L290 TraceCheckUtils]: 65: Hoare triple {12299#true} assume !(0 == ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L272 TraceCheckUtils]: 66: Hoare triple {12299#true} call processEnvironment__wrappee__base(); {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L290 TraceCheckUtils]: 67: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L290 TraceCheckUtils]: 69: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,618 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {12299#true} {12376#(<= |old(~waterLevel~0)| 1)} #226#return; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,619 INFO L290 TraceCheckUtils]: 71: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,619 INFO L290 TraceCheckUtils]: 72: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,619 INFO L290 TraceCheckUtils]: 73: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,619 INFO L290 TraceCheckUtils]: 74: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 75: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 76: Hoare triple {12376#(<= |old(~waterLevel~0)| 1)} assume true; {12376#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:06,620 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {12376#(<= |old(~waterLevel~0)| 1)} {12326#(<= 2 ~waterLevel~0)} #238#return; {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 78: Hoare triple {12300#false} assume !false; {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 79: Hoare triple {12300#false} assume test_~splverifierCounter~0#1 < 4; {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 80: Hoare triple {12300#false} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 81: Hoare triple {12300#false} assume !(0 != test_~tmp~9#1); {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 82: Hoare triple {12300#false} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 83: Hoare triple {12300#false} assume !(0 != test_~tmp___0~3#1); {12300#false} is VALID [2022-02-20 18:11:06,620 INFO L290 TraceCheckUtils]: 84: Hoare triple {12300#false} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 85: Hoare triple {12300#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 86: Hoare triple {12300#false} assume 0 != test_~tmp___1~0#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L272 TraceCheckUtils]: 87: Hoare triple {12300#false} call timeShift(); {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 88: Hoare triple {12300#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 89: Hoare triple {12300#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 90: Hoare triple {12300#false} assume { :end_inline_lowerWaterLevel } true; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 91: Hoare triple {12300#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 92: Hoare triple {12300#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 93: Hoare triple {12300#false} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 94: Hoare triple {12300#false} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 95: Hoare triple {12300#false} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 96: Hoare triple {12300#false} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 97: Hoare triple {12300#false} assume !(0 != processEnvironment_~tmp~6#1); {12300#false} is VALID [2022-02-20 18:11:06,621 INFO L272 TraceCheckUtils]: 98: Hoare triple {12300#false} call processEnvironment__wrappee__highWaterSensor(); {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 99: Hoare triple {12372#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 100: Hoare triple {12299#true} assume !(0 == ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L272 TraceCheckUtils]: 101: Hoare triple {12299#true} call processEnvironment__wrappee__base(); {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 102: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L284 TraceCheckUtils]: 103: Hoare quadruple {12299#true} {12299#true} #244#return; {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L290 TraceCheckUtils]: 104: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:06,621 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {12299#true} {12300#false} #226#return; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 106: Hoare triple {12300#false} assume { :end_inline_processEnvironment } true; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 107: Hoare triple {12300#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 108: Hoare triple {12300#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 109: Hoare triple {12300#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 110: Hoare triple {12300#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 111: Hoare triple {12300#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L290 TraceCheckUtils]: 112: Hoare triple {12300#false} assume !false; {12300#false} is VALID [2022-02-20 18:11:06,622 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-02-20 18:11:06,622 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:06,622 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211011957] [2022-02-20 18:11:06,622 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211011957] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:06,622 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1912165947] [2022-02-20 18:11:06,622 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-20 18:11:06,623 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:06,623 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:06,636 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:06,637 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:11:06,728 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-20 18:11:06,728 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-20 18:11:06,730 INFO L263 TraceCheckSpWp]: Trace formula consists of 520 conjuncts, 10 conjunts are in the unsatisfiable core [2022-02-20 18:11:06,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:06,747 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:07,055 INFO L290 TraceCheckUtils]: 0: Hoare triple {12299#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 1: Hoare triple {12299#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 2: Hoare triple {12299#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 3: Hoare triple {12299#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 4: Hoare triple {12299#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 5: Hoare triple {12299#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 6: Hoare triple {12299#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {12299#true} is VALID [2022-02-20 18:11:07,056 INFO L290 TraceCheckUtils]: 7: Hoare triple {12299#true} assume !false; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 8: Hoare triple {12299#true} assume test_~splverifierCounter~0#1 < 4; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 9: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 10: Hoare triple {12299#true} assume 0 != test_~tmp~9#1; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L272 TraceCheckUtils]: 11: Hoare triple {12299#true} call waterRise(); {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 12: Hoare triple {12299#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 13: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {12299#true} {12299#true} #234#return; {12299#true} is VALID [2022-02-20 18:11:07,057 INFO L290 TraceCheckUtils]: 15: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 16: Hoare triple {12299#true} assume !(0 != test_~tmp___0~3#1); {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 17: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 18: Hoare triple {12299#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 19: Hoare triple {12299#true} assume 0 != test_~tmp___1~0#1; {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L272 TraceCheckUtils]: 20: Hoare triple {12299#true} call timeShift(); {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 21: Hoare triple {12299#true} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:07,058 INFO L290 TraceCheckUtils]: 22: Hoare triple {12299#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 23: Hoare triple {12299#true} assume !(0 != ~pumpRunning~0); {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L272 TraceCheckUtils]: 24: Hoare triple {12299#true} call processEnvironment__wrappee__highWaterSensor(); {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 25: Hoare triple {12299#true} havoc ~tmp~5#1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 26: Hoare triple {12299#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 27: Hoare triple {12299#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 28: Hoare triple {12299#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 29: Hoare triple {12299#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {12299#true} is VALID [2022-02-20 18:11:07,059 INFO L290 TraceCheckUtils]: 30: Hoare triple {12299#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 31: Hoare triple {12299#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 32: Hoare triple {12299#true} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 33: Hoare triple {12299#true} assume { :end_inline_activatePump } true; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 34: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {12299#true} {12299#true} #228#return; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 36: Hoare triple {12299#true} assume { :end_inline_processEnvironment } true; {12299#true} is VALID [2022-02-20 18:11:07,060 INFO L290 TraceCheckUtils]: 37: Hoare triple {12299#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 38: Hoare triple {12299#true} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 39: Hoare triple {12299#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 40: Hoare triple {12299#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 41: Hoare triple {12299#true} assume true; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {12299#true} {12299#true} #238#return; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 43: Hoare triple {12299#true} assume !false; {12299#true} is VALID [2022-02-20 18:11:07,061 INFO L290 TraceCheckUtils]: 44: Hoare triple {12299#true} assume test_~splverifierCounter~0#1 < 4; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 45: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 46: Hoare triple {12299#true} assume !(0 != test_~tmp~9#1); {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 47: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 48: Hoare triple {12299#true} assume !(0 != test_~tmp___0~3#1); {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 49: Hoare triple {12299#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 50: Hoare triple {12299#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L290 TraceCheckUtils]: 51: Hoare triple {12299#true} assume 0 != test_~tmp___1~0#1; {12299#true} is VALID [2022-02-20 18:11:07,062 INFO L272 TraceCheckUtils]: 52: Hoare triple {12299#true} call timeShift(); {12299#true} is VALID [2022-02-20 18:11:07,063 INFO L290 TraceCheckUtils]: 53: Hoare triple {12299#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {12299#true} is VALID [2022-02-20 18:11:07,063 INFO L290 TraceCheckUtils]: 54: Hoare triple {12299#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12299#true} is VALID [2022-02-20 18:11:07,063 INFO L290 TraceCheckUtils]: 55: Hoare triple {12299#true} assume { :end_inline_lowerWaterLevel } true; {12299#true} is VALID [2022-02-20 18:11:07,063 INFO L290 TraceCheckUtils]: 56: Hoare triple {12299#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12299#true} is VALID [2022-02-20 18:11:07,064 INFO L290 TraceCheckUtils]: 57: Hoare triple {12299#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {12562#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:07,064 INFO L290 TraceCheckUtils]: 58: Hoare triple {12562#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0)))} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {12566#(or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) (= ~waterLevel~0 0)) (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} is VALID [2022-02-20 18:11:07,065 INFO L290 TraceCheckUtils]: 59: Hoare triple {12566#(or (and (= |timeShift_isLowWaterLevel_~tmp~8#1| 1) (= ~waterLevel~0 0)) (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0)))} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,065 INFO L290 TraceCheckUtils]: 60: Hoare triple {12570#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,065 INFO L290 TraceCheckUtils]: 61: Hoare triple {12570#(= ~waterLevel~0 0)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,066 INFO L290 TraceCheckUtils]: 62: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 != processEnvironment_~tmp~6#1); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,066 INFO L272 TraceCheckUtils]: 63: Hoare triple {12570#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,067 INFO L290 TraceCheckUtils]: 64: Hoare triple {12570#(= ~waterLevel~0 0)} havoc ~tmp~5#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,067 INFO L290 TraceCheckUtils]: 65: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 == ~pumpRunning~0); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,067 INFO L272 TraceCheckUtils]: 66: Hoare triple {12570#(= ~waterLevel~0 0)} call processEnvironment__wrappee__base(); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,068 INFO L290 TraceCheckUtils]: 67: Hoare triple {12570#(= ~waterLevel~0 0)} assume true; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,068 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {12570#(= ~waterLevel~0 0)} {12570#(= ~waterLevel~0 0)} #244#return; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,068 INFO L290 TraceCheckUtils]: 69: Hoare triple {12570#(= ~waterLevel~0 0)} assume true; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,069 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {12570#(= ~waterLevel~0 0)} {12570#(= ~waterLevel~0 0)} #226#return; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,069 INFO L290 TraceCheckUtils]: 71: Hoare triple {12570#(= ~waterLevel~0 0)} assume { :end_inline_processEnvironment } true; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,069 INFO L290 TraceCheckUtils]: 72: Hoare triple {12570#(= ~waterLevel~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,070 INFO L290 TraceCheckUtils]: 73: Hoare triple {12570#(= ~waterLevel~0 0)} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,070 INFO L290 TraceCheckUtils]: 74: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,070 INFO L290 TraceCheckUtils]: 75: Hoare triple {12570#(= ~waterLevel~0 0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,071 INFO L290 TraceCheckUtils]: 76: Hoare triple {12570#(= ~waterLevel~0 0)} assume true; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,071 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {12570#(= ~waterLevel~0 0)} {12299#true} #238#return; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,071 INFO L290 TraceCheckUtils]: 78: Hoare triple {12570#(= ~waterLevel~0 0)} assume !false; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,072 INFO L290 TraceCheckUtils]: 79: Hoare triple {12570#(= ~waterLevel~0 0)} assume test_~splverifierCounter~0#1 < 4; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,072 INFO L290 TraceCheckUtils]: 80: Hoare triple {12570#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,072 INFO L290 TraceCheckUtils]: 81: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 != test_~tmp~9#1); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,073 INFO L290 TraceCheckUtils]: 82: Hoare triple {12570#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,073 INFO L290 TraceCheckUtils]: 83: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 != test_~tmp___0~3#1); {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,073 INFO L290 TraceCheckUtils]: 84: Hoare triple {12570#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,074 INFO L290 TraceCheckUtils]: 85: Hoare triple {12570#(= ~waterLevel~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,074 INFO L290 TraceCheckUtils]: 86: Hoare triple {12570#(= ~waterLevel~0 0)} assume 0 != test_~tmp___1~0#1; {12570#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,074 INFO L272 TraceCheckUtils]: 87: Hoare triple {12570#(= ~waterLevel~0 0)} call timeShift(); {12655#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,075 INFO L290 TraceCheckUtils]: 88: Hoare triple {12655#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {12655#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:07,075 INFO L290 TraceCheckUtils]: 89: Hoare triple {12655#(<= ~waterLevel~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12300#false} is VALID [2022-02-20 18:11:07,075 INFO L290 TraceCheckUtils]: 90: Hoare triple {12300#false} assume { :end_inline_lowerWaterLevel } true; {12300#false} is VALID [2022-02-20 18:11:07,075 INFO L290 TraceCheckUtils]: 91: Hoare triple {12300#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {12300#false} is VALID [2022-02-20 18:11:07,075 INFO L290 TraceCheckUtils]: 92: Hoare triple {12300#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 93: Hoare triple {12300#false} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 94: Hoare triple {12300#false} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 95: Hoare triple {12300#false} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 96: Hoare triple {12300#false} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 97: Hoare triple {12300#false} assume !(0 != processEnvironment_~tmp~6#1); {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L272 TraceCheckUtils]: 98: Hoare triple {12300#false} call processEnvironment__wrappee__highWaterSensor(); {12300#false} is VALID [2022-02-20 18:11:07,076 INFO L290 TraceCheckUtils]: 99: Hoare triple {12300#false} havoc ~tmp~5#1; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L290 TraceCheckUtils]: 100: Hoare triple {12300#false} assume !(0 == ~pumpRunning~0); {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L272 TraceCheckUtils]: 101: Hoare triple {12300#false} call processEnvironment__wrappee__base(); {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L290 TraceCheckUtils]: 102: Hoare triple {12300#false} assume true; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L284 TraceCheckUtils]: 103: Hoare quadruple {12300#false} {12300#false} #244#return; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L290 TraceCheckUtils]: 104: Hoare triple {12300#false} assume true; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {12300#false} {12300#false} #226#return; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L290 TraceCheckUtils]: 106: Hoare triple {12300#false} assume { :end_inline_processEnvironment } true; {12300#false} is VALID [2022-02-20 18:11:07,077 INFO L290 TraceCheckUtils]: 107: Hoare triple {12300#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {12300#false} is VALID [2022-02-20 18:11:07,078 INFO L290 TraceCheckUtils]: 108: Hoare triple {12300#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {12300#false} is VALID [2022-02-20 18:11:07,078 INFO L290 TraceCheckUtils]: 109: Hoare triple {12300#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {12300#false} is VALID [2022-02-20 18:11:07,078 INFO L290 TraceCheckUtils]: 110: Hoare triple {12300#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {12300#false} is VALID [2022-02-20 18:11:07,078 INFO L290 TraceCheckUtils]: 111: Hoare triple {12300#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {12300#false} is VALID [2022-02-20 18:11:07,078 INFO L290 TraceCheckUtils]: 112: Hoare triple {12300#false} assume !false; {12300#false} is VALID [2022-02-20 18:11:07,079 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-02-20 18:11:07,079 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:07,079 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1912165947] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:07,079 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:07,079 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-02-20 18:11:07,079 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1380535562] [2022-02-20 18:11:07,080 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:07,080 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 113 [2022-02-20 18:11:07,080 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:07,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:07,151 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 103 edges. 103 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:07,152 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:07,152 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:07,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:07,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:11:07,153 INFO L87 Difference]: Start difference. First operand 348 states and 430 transitions. Second operand has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:07,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:07,761 INFO L93 Difference]: Finished difference Result 927 states and 1188 transitions. [2022-02-20 18:11:07,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-20 18:11:07,761 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 113 [2022-02-20 18:11:07,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:07,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:07,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 342 transitions. [2022-02-20 18:11:07,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:07,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 342 transitions. [2022-02-20 18:11:07,767 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 342 transitions. [2022-02-20 18:11:07,969 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 342 edges. 342 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:07,988 INFO L225 Difference]: With dead ends: 927 [2022-02-20 18:11:07,988 INFO L226 Difference]: Without dead ends: 626 [2022-02-20 18:11:07,989 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 145 GetRequests, 126 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:07,990 INFO L933 BasicCegarLoop]: 135 mSDtfsCounter, 242 mSDsluCounter, 321 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:07,990 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [242 Valid, 456 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:07,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2022-02-20 18:11:08,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 565. [2022-02-20 18:11:08,072 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:08,073 INFO L82 GeneralOperation]: Start isEquivalent. First operand 626 states. Second operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) [2022-02-20 18:11:08,073 INFO L74 IsIncluded]: Start isIncluded. First operand 626 states. Second operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) [2022-02-20 18:11:08,074 INFO L87 Difference]: Start difference. First operand 626 states. Second operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) [2022-02-20 18:11:08,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:08,090 INFO L93 Difference]: Finished difference Result 626 states and 766 transitions. [2022-02-20 18:11:08,090 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 766 transitions. [2022-02-20 18:11:08,091 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:08,091 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:08,092 INFO L74 IsIncluded]: Start isIncluded. First operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) Second operand 626 states. [2022-02-20 18:11:08,093 INFO L87 Difference]: Start difference. First operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) Second operand 626 states. [2022-02-20 18:11:08,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:08,109 INFO L93 Difference]: Finished difference Result 626 states and 766 transitions. [2022-02-20 18:11:08,109 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 766 transitions. [2022-02-20 18:11:08,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:08,110 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:08,110 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:08,110 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:08,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 565 states, 450 states have (on average 1.2066666666666668) internal successors, (543), 475 states have internal predecessors, (543), 55 states have call successors, (55), 54 states have call predecessors, (55), 59 states have return successors, (96), 51 states have call predecessors, (96), 55 states have call successors, (96) [2022-02-20 18:11:08,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 565 states to 565 states and 694 transitions. [2022-02-20 18:11:08,135 INFO L78 Accepts]: Start accepts. Automaton has 565 states and 694 transitions. Word has length 113 [2022-02-20 18:11:08,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:08,135 INFO L470 AbstractCegarLoop]: Abstraction has 565 states and 694 transitions. [2022-02-20 18:11:08,135 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.5) internal successors, (87), 6 states have internal predecessors, (87), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:08,135 INFO L276 IsEmpty]: Start isEmpty. Operand 565 states and 694 transitions. [2022-02-20 18:11:08,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2022-02-20 18:11:08,151 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:08,152 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:08,171 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:08,367 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-02-20 18:11:08,367 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:08,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:08,368 INFO L85 PathProgramCache]: Analyzing trace with hash -1481360023, now seen corresponding path program 1 times [2022-02-20 18:11:08,368 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:08,368 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877011284] [2022-02-20 18:11:08,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:08,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:08,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:08,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,407 INFO L290 TraceCheckUtils]: 0: Hoare triple {16169#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16110#true} is VALID [2022-02-20 18:11:08,407 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,407 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16110#true} {16110#true} #234#return; {16110#true} is VALID [2022-02-20 18:11:08,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:11:08,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:08,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 0: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 2: Hoare triple {16110#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 3: Hoare triple {16110#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 4: Hoare triple {16110#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 6: Hoare triple {16110#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 7: Hoare triple {16110#true} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 8: Hoare triple {16110#true} assume { :end_inline_activatePump } true; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 9: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16110#true} {16110#true} #228#return; {16110#true} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 0: Hoare triple {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 2: Hoare triple {16110#true} assume !(0 != ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L272 TraceCheckUtils]: 3: Hoare triple {16110#true} call processEnvironment__wrappee__highWaterSensor(); {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 4: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 6: Hoare triple {16110#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 7: Hoare triple {16110#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 8: Hoare triple {16110#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 9: Hoare triple {16110#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 10: Hoare triple {16110#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 11: Hoare triple {16110#true} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 12: Hoare triple {16110#true} assume { :end_inline_activatePump } true; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 13: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,422 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16110#true} {16110#true} #228#return; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 15: Hoare triple {16110#true} assume { :end_inline_processEnvironment } true; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 16: Hoare triple {16110#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 17: Hoare triple {16110#true} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 18: Hoare triple {16110#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 19: Hoare triple {16110#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 20: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {16110#true} {16110#true} #238#return; {16110#true} is VALID [2022-02-20 18:11:08,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-02-20 18:11:08,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:11:08,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:08,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 0: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 0: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume !(0 == ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L272 TraceCheckUtils]: 2: Hoare triple {16110#true} call processEnvironment__wrappee__base(); {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 3: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {16110#true} {16111#false} #226#return; {16111#false} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 0: Hoare triple {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 2: Hoare triple {16110#true} assume { :end_inline_lowerWaterLevel } true; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 3: Hoare triple {16110#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {16110#true} is VALID [2022-02-20 18:11:08,450 INFO L290 TraceCheckUtils]: 4: Hoare triple {16110#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16110#true} is VALID [2022-02-20 18:11:08,451 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {16110#true} is VALID [2022-02-20 18:11:08,451 INFO L290 TraceCheckUtils]: 6: Hoare triple {16110#true} assume !(0 != isLowWaterLevel_~tmp~8#1);isLowWaterLevel_~tmp___0~2#1 := 1; {16183#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} is VALID [2022-02-20 18:11:08,451 INFO L290 TraceCheckUtils]: 7: Hoare triple {16183#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {16184#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:08,451 INFO L290 TraceCheckUtils]: 8: Hoare triple {16184#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {16185#(<= 1 |timeShift_processEnvironment_~tmp~6#1|)} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 9: Hoare triple {16185#(<= 1 |timeShift_processEnvironment_~tmp~6#1|)} assume !(0 != processEnvironment_~tmp~6#1); {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L272 TraceCheckUtils]: 10: Hoare triple {16111#false} call processEnvironment__wrappee__highWaterSensor(); {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 11: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 12: Hoare triple {16110#true} assume !(0 == ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L272 TraceCheckUtils]: 13: Hoare triple {16110#true} call processEnvironment__wrappee__base(); {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 14: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 16: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,452 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {16110#true} {16111#false} #226#return; {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 18: Hoare triple {16111#false} assume { :end_inline_processEnvironment } true; {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 19: Hoare triple {16111#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 20: Hoare triple {16111#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 21: Hoare triple {16111#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {16111#false} is VALID [2022-02-20 18:11:08,452 INFO L290 TraceCheckUtils]: 22: Hoare triple {16111#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16111#false} is VALID [2022-02-20 18:11:08,453 INFO L290 TraceCheckUtils]: 23: Hoare triple {16111#false} assume true; {16111#false} is VALID [2022-02-20 18:11:08,453 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {16111#false} {16110#true} #238#return; {16111#false} is VALID [2022-02-20 18:11:08,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-02-20 18:11:08,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:08,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,457 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume !(0 == ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L272 TraceCheckUtils]: 2: Hoare triple {16110#true} call processEnvironment__wrappee__base(); {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 3: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {16110#true} {16111#false} #226#return; {16111#false} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {16110#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(13, 16);call #Ultimate.allocInit(7, 17);call write~init~int(44, 17, 0, 1);call write~init~int(77, 17, 1, 1);call write~init~int(101, 17, 2, 1);call write~init~int(116, 17, 3, 1);call write~init~int(104, 17, 4, 1);call write~init~int(58, 17, 5, 1);call write~init~int(0, 17, 6, 1);call #Ultimate.allocInit(5, 18);call write~init~int(67, 18, 0, 1);call write~init~int(82, 18, 1, 1);call write~init~int(73, 18, 2, 1);call write~init~int(84, 18, 3, 1);call write~init~int(0, 18, 4, 1);call #Ultimate.allocInit(3, 19);call write~init~int(79, 19, 0, 1);call write~init~int(75, 19, 1, 1);call write~init~int(0, 19, 2, 1);call #Ultimate.allocInit(2, 20);call write~init~int(41, 20, 0, 1);call write~init~int(0, 20, 1, 1);call #Ultimate.allocInit(13, 21);call #Ultimate.allocInit(3, 22);call write~init~int(79, 22, 0, 1);call write~init~int(110, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(4, 23);call write~init~int(79, 23, 0, 1);call write~init~int(102, 23, 1, 1);call write~init~int(102, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(7, 24);call write~init~int(44, 24, 0, 1);call write~init~int(80, 24, 1, 1);call write~init~int(117, 24, 2, 1);call write~init~int(109, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(3, 25);call write~init~int(79, 25, 0, 1);call write~init~int(110, 25, 1, 1);call write~init~int(0, 25, 2, 1);call #Ultimate.allocInit(4, 26);call write~init~int(79, 26, 0, 1);call write~init~int(102, 26, 1, 1);call write~init~int(102, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(3, 27);call write~init~int(41, 27, 0, 1);call write~init~int(32, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(10, 28, 0, 1);call write~init~int(0, 28, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {16110#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret29#1, main_~retValue_acc~3#1, main_~tmp~4#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~4#1;assume { :begin_inline_select_helpers } true; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 2: Hoare triple {16110#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 3: Hoare triple {16110#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~5#1;havoc valid_product_~retValue_acc~5#1;valid_product_~retValue_acc~5#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~5#1; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 4: Hoare triple {16110#true} main_#t~ret29#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret29#1 && main_#t~ret29#1 <= 2147483647;main_~tmp~4#1 := main_#t~ret29#1;havoc main_#t~ret29#1; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 5: Hoare triple {16110#true} assume 0 != main_~tmp~4#1;assume { :begin_inline_setup } true; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 6: Hoare triple {16110#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet49#1, test_#t~nondet50#1, test_#t~nondet51#1, test_#t~nondet52#1, test_~splverifierCounter~0#1, test_~tmp~9#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~9#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 7: Hoare triple {16110#true} assume !false; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 8: Hoare triple {16110#true} assume test_~splverifierCounter~0#1 < 4; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 9: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16110#true} is VALID [2022-02-20 18:11:08,458 INFO L290 TraceCheckUtils]: 10: Hoare triple {16110#true} assume 0 != test_~tmp~9#1; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L272 TraceCheckUtils]: 11: Hoare triple {16110#true} call waterRise(); {16169#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 12: Hoare triple {16169#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 13: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16110#true} {16110#true} #234#return; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 15: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 16: Hoare triple {16110#true} assume !(0 != test_~tmp___0~3#1); {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 17: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 18: Hoare triple {16110#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L290 TraceCheckUtils]: 19: Hoare triple {16110#true} assume 0 != test_~tmp___1~0#1; {16110#true} is VALID [2022-02-20 18:11:08,459 INFO L272 TraceCheckUtils]: 20: Hoare triple {16110#true} call timeShift(); {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 21: Hoare triple {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 22: Hoare triple {16110#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 23: Hoare triple {16110#true} assume !(0 != ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L272 TraceCheckUtils]: 24: Hoare triple {16110#true} call processEnvironment__wrappee__highWaterSensor(); {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 25: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 26: Hoare triple {16110#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret47#1, isHighWaterLevel_~retValue_acc~12#1, isHighWaterLevel_~tmp~7#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~12#1;havoc isHighWaterLevel_~tmp~7#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 27: Hoare triple {16110#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 28: Hoare triple {16110#true} isHighWaterLevel_#t~ret47#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret47#1 && isHighWaterLevel_#t~ret47#1 <= 2147483647;isHighWaterLevel_~tmp~7#1 := isHighWaterLevel_#t~ret47#1;havoc isHighWaterLevel_#t~ret47#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 29: Hoare triple {16110#true} assume !(0 != isHighWaterLevel_~tmp~7#1);isHighWaterLevel_~tmp___0~1#1 := 1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 30: Hoare triple {16110#true} isHighWaterLevel_~retValue_acc~12#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~12#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 31: Hoare triple {16110#true} #t~ret36#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;~tmp~5#1 := #t~ret36#1;havoc #t~ret36#1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 32: Hoare triple {16110#true} assume 0 != ~tmp~5#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 33: Hoare triple {16110#true} assume { :end_inline_activatePump } true; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L290 TraceCheckUtils]: 34: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,460 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {16110#true} {16110#true} #228#return; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 36: Hoare triple {16110#true} assume { :end_inline_processEnvironment } true; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 37: Hoare triple {16110#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 38: Hoare triple {16110#true} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 39: Hoare triple {16110#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 40: Hoare triple {16110#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 41: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {16110#true} {16110#true} #238#return; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 43: Hoare triple {16110#true} assume !false; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 44: Hoare triple {16110#true} assume test_~splverifierCounter~0#1 < 4; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 45: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 46: Hoare triple {16110#true} assume !(0 != test_~tmp~9#1); {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 47: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 48: Hoare triple {16110#true} assume !(0 != test_~tmp___0~3#1); {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 49: Hoare triple {16110#true} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 50: Hoare triple {16110#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16110#true} is VALID [2022-02-20 18:11:08,461 INFO L290 TraceCheckUtils]: 51: Hoare triple {16110#true} assume 0 != test_~tmp___1~0#1; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L272 TraceCheckUtils]: 52: Hoare triple {16110#true} call timeShift(); {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 53: Hoare triple {16170#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 54: Hoare triple {16110#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 55: Hoare triple {16110#true} assume { :end_inline_lowerWaterLevel } true; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 56: Hoare triple {16110#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 57: Hoare triple {16110#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 58: Hoare triple {16110#true} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {16110#true} is VALID [2022-02-20 18:11:08,462 INFO L290 TraceCheckUtils]: 59: Hoare triple {16110#true} assume !(0 != isLowWaterLevel_~tmp~8#1);isLowWaterLevel_~tmp___0~2#1 := 1; {16183#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 60: Hoare triple {16183#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {16184#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 61: Hoare triple {16184#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {16185#(<= 1 |timeShift_processEnvironment_~tmp~6#1|)} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 62: Hoare triple {16185#(<= 1 |timeShift_processEnvironment_~tmp~6#1|)} assume !(0 != processEnvironment_~tmp~6#1); {16111#false} is VALID [2022-02-20 18:11:08,463 INFO L272 TraceCheckUtils]: 63: Hoare triple {16111#false} call processEnvironment__wrappee__highWaterSensor(); {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 64: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 65: Hoare triple {16110#true} assume !(0 == ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,463 INFO L272 TraceCheckUtils]: 66: Hoare triple {16110#true} call processEnvironment__wrappee__base(); {16110#true} is VALID [2022-02-20 18:11:08,463 INFO L290 TraceCheckUtils]: 67: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,463 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 69: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,464 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {16110#true} {16111#false} #226#return; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 71: Hoare triple {16111#false} assume { :end_inline_processEnvironment } true; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 72: Hoare triple {16111#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 73: Hoare triple {16111#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 74: Hoare triple {16111#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3#1); {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 75: Hoare triple {16111#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 76: Hoare triple {16111#false} assume true; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {16111#false} {16110#true} #238#return; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 78: Hoare triple {16111#false} assume !false; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 79: Hoare triple {16111#false} assume test_~splverifierCounter~0#1 < 4; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 80: Hoare triple {16111#false} assume -2147483648 <= test_#t~nondet49#1 && test_#t~nondet49#1 <= 2147483647;test_~tmp~9#1 := test_#t~nondet49#1;havoc test_#t~nondet49#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 81: Hoare triple {16111#false} assume !(0 != test_~tmp~9#1); {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 82: Hoare triple {16111#false} assume -2147483648 <= test_#t~nondet50#1 && test_#t~nondet50#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet50#1;havoc test_#t~nondet50#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 83: Hoare triple {16111#false} assume !(0 != test_~tmp___0~3#1); {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 84: Hoare triple {16111#false} assume -2147483648 <= test_#t~nondet51#1 && test_#t~nondet51#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet51#1;havoc test_#t~nondet51#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 85: Hoare triple {16111#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet52#1 && test_#t~nondet52#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet52#1;havoc test_#t~nondet52#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 86: Hoare triple {16111#false} assume 0 != test_~tmp___1~0#1; {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L272 TraceCheckUtils]: 87: Hoare triple {16111#false} call timeShift(); {16111#false} is VALID [2022-02-20 18:11:08,464 INFO L290 TraceCheckUtils]: 88: Hoare triple {16111#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 89: Hoare triple {16111#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 90: Hoare triple {16111#false} assume { :end_inline_lowerWaterLevel } true; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 91: Hoare triple {16111#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret37#1, processEnvironment_~tmp~6#1;havoc processEnvironment_~tmp~6#1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 92: Hoare triple {16111#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret48#1, isLowWaterLevel_~retValue_acc~13#1, isLowWaterLevel_~tmp~8#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~13#1;havoc isLowWaterLevel_~tmp~8#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 93: Hoare triple {16111#false} isLowWaterLevel_#t~ret48#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret48#1 && isLowWaterLevel_#t~ret48#1 <= 2147483647;isLowWaterLevel_~tmp~8#1 := isLowWaterLevel_#t~ret48#1;havoc isLowWaterLevel_#t~ret48#1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 94: Hoare triple {16111#false} assume 0 != isLowWaterLevel_~tmp~8#1;isLowWaterLevel_~tmp___0~2#1 := 0; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 95: Hoare triple {16111#false} isLowWaterLevel_~retValue_acc~13#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~13#1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 96: Hoare triple {16111#false} processEnvironment_#t~ret37#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret37#1 && processEnvironment_#t~ret37#1 <= 2147483647;processEnvironment_~tmp~6#1 := processEnvironment_#t~ret37#1;havoc processEnvironment_#t~ret37#1; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 97: Hoare triple {16111#false} assume !(0 != processEnvironment_~tmp~6#1); {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L272 TraceCheckUtils]: 98: Hoare triple {16111#false} call processEnvironment__wrappee__highWaterSensor(); {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 99: Hoare triple {16182#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~5#1; {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 100: Hoare triple {16110#true} assume !(0 == ~pumpRunning~0); {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L272 TraceCheckUtils]: 101: Hoare triple {16110#true} call processEnvironment__wrappee__base(); {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 102: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L284 TraceCheckUtils]: 103: Hoare quadruple {16110#true} {16110#true} #244#return; {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 104: Hoare triple {16110#true} assume true; {16110#true} is VALID [2022-02-20 18:11:08,465 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {16110#true} {16111#false} #226#return; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 106: Hoare triple {16111#false} assume { :end_inline_processEnvironment } true; {16111#false} is VALID [2022-02-20 18:11:08,465 INFO L290 TraceCheckUtils]: 107: Hoare triple {16111#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret27#1, __utac_acc__Specification4_spec__1_#t~ret28#1, __utac_acc__Specification4_spec__1_~tmp~3#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~3#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L290 TraceCheckUtils]: 108: Hoare triple {16111#false} __utac_acc__Specification4_spec__1_#t~ret27#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27#1 && __utac_acc__Specification4_spec__1_#t~ret27#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3#1 := __utac_acc__Specification4_spec__1_#t~ret27#1;havoc __utac_acc__Specification4_spec__1_#t~ret27#1; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L290 TraceCheckUtils]: 109: Hoare triple {16111#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~11#1;havoc isPumpRunning_~retValue_acc~11#1;isPumpRunning_~retValue_acc~11#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~11#1; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L290 TraceCheckUtils]: 110: Hoare triple {16111#false} __utac_acc__Specification4_spec__1_#t~ret28#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28#1 && __utac_acc__Specification4_spec__1_#t~ret28#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret28#1;havoc __utac_acc__Specification4_spec__1_#t~ret28#1; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L290 TraceCheckUtils]: 111: Hoare triple {16111#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L290 TraceCheckUtils]: 112: Hoare triple {16111#false} assume !false; {16111#false} is VALID [2022-02-20 18:11:08,466 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-02-20 18:11:08,466 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:08,466 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877011284] [2022-02-20 18:11:08,466 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1877011284] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:08,466 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:08,466 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:11:08,466 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280889542] [2022-02-20 18:11:08,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:08,467 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 113 [2022-02-20 18:11:08,467 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:08,467 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:08,508 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:08,508 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:11:08,509 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:08,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:11:08,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:11:08,509 INFO L87 Difference]: Start difference. First operand 565 states and 694 transitions. Second operand has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:08,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:08,995 INFO L93 Difference]: Finished difference Result 773 states and 939 transitions. [2022-02-20 18:11:08,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:11:08,995 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 113 [2022-02-20 18:11:08,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:08,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:08,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 192 transitions. [2022-02-20 18:11:08,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:08,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 192 transitions. [2022-02-20 18:11:08,999 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 192 transitions. [2022-02-20 18:11:09,117 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 192 edges. 192 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:09,118 INFO L225 Difference]: With dead ends: 773 [2022-02-20 18:11:09,118 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:11:09,120 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:09,120 INFO L933 BasicCegarLoop]: 71 mSDtfsCounter, 77 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 188 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 204 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:09,120 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [79 Valid, 318 Invalid, 204 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 188 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:09,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:11:09,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:11:09,121 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:09,122 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:09,122 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:09,122 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:09,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:09,122 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:09,122 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:09,122 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:09,122 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:09,122 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:09,123 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:09,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:09,123 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:09,123 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:09,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:09,123 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:09,123 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:09,123 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:09,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:09,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:11:09,124 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 113 [2022-02-20 18:11:09,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:09,124 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:11:09,124 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.75) internal successors, (78), 5 states have internal predecessors, (78), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:09,125 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:09,125 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:09,127 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:11:09,127 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-02-20 18:11:09,129 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-02-20 18:11:10,683 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-02-20 18:11:10,683 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 624 635) the Hoare annotation is: true [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 624 635) no Hoare annotation was computed. [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point L628-1(lines 624 635) no Hoare annotation was computed. [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2022-02-20 18:11:10,683 INFO L854 garLoopResultBuilder]: At program point L696(lines 691 699) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point L890-2(lines 890 894) no Hoare annotation was computed. [2022-02-20 18:11:10,683 INFO L854 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,683 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0))) (let ((.cse2 (not .cse4)) (.cse3 (and (<= 2 ~waterLevel~0) .cse4 .cse1)) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1) .cse2 .cse3 (not (<= 1 |old(~waterLevel~0)|))) (or .cse2 .cse3 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:11:10,684 INFO L858 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2022-02-20 18:11:10,684 INFO L858 garLoopResultBuilder]: For program point L553(line 553) no Hoare annotation was computed. [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L673(lines 668 676) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse2 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L896(lines 881 899) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L822(lines 817 825) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,684 INFO L854 garLoopResultBuilder]: At program point L554(lines 549 556) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,684 INFO L858 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-02-20 18:11:10,684 INFO L858 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2022-02-20 18:11:10,684 INFO L858 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L854 garLoopResultBuilder]: At program point L604-2(lines 600 611) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,685 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))))) [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L427(lines 427 440) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L854 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse5 (= 1 ~systemActive~0))) (let ((.cse1 (and .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|) (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|))) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (not .cse5))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse4 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3) (or .cse0 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) .cse4 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1)) (not (= |old(~waterLevel~0)| 1)) .cse2)))) [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 553) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L854 garLoopResultBuilder]: At program point L803(lines 798 805) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 447 476) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 447 476) the Hoare annotation is: true [2022-02-20 18:11:10,685 INFO L861 garLoopResultBuilder]: At program point L472(lines 447 476) the Hoare annotation is: true [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L468(line 468) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L461(lines 461 465) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L861 garLoopResultBuilder]: At program point L461-1(lines 461 465) the Hoare annotation is: true [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L458(line 458) no Hoare annotation was computed. [2022-02-20 18:11:10,685 INFO L861 garLoopResultBuilder]: At program point L457-2(lines 457 471) the Hoare annotation is: true [2022-02-20 18:11:10,685 INFO L861 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: true [2022-02-20 18:11:10,685 INFO L858 garLoopResultBuilder]: For program point L453-1(line 453) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L535(lines 535 542) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L535-2(lines 535 542) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L861 garLoopResultBuilder]: At program point L519(lines 512 521) the Hoare annotation is: true [2022-02-20 18:11:10,686 INFO L861 garLoopResultBuilder]: At program point L544(lines 525 547) the Hoare annotation is: true [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L573(lines 569 575) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 961) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L957-2(lines 949 962) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L920(lines 919 966) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L949(lines 949 962) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-02-20 18:11:10,686 INFO L861 garLoopResultBuilder]: At program point L970(lines 909 974) the Hoare annotation is: true [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L929(lines 929 935) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L929-1(lines 929 935) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L508(lines 504 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:10,686 INFO L858 garLoopResultBuilder]: For program point L921(lines 921 925) no Hoare annotation was computed. [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L905(lines 900 907) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L967(lines 918 968) the Hoare annotation is: false [2022-02-20 18:11:10,686 INFO L854 garLoopResultBuilder]: At program point L588(lines 583 591) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:10,687 INFO L858 garLoopResultBuilder]: For program point L939(lines 939 945) no Hoare annotation was computed. [2022-02-20 18:11:10,687 INFO L858 garLoopResultBuilder]: For program point L939-1(lines 939 945) no Hoare annotation was computed. [2022-02-20 18:11:10,687 INFO L854 garLoopResultBuilder]: At program point L580(lines 576 582) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point L964(lines 919 966) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point L931(line 931) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point L795(lines 790 797) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0))) [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-02-20 18:11:10,688 INFO L858 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-02-20 18:11:10,688 INFO L854 garLoopResultBuilder]: At program point L686(lines 677 690) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-02-20 18:11:10,688 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L854 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (and (or .cse0 .cse1 (and .cse2 .cse3) (not (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-02-20 18:11:10,689 INFO L854 garLoopResultBuilder]: At program point L877(lines 862 880) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= 1 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse1))) [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L681(lines 681 687) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L871(lines 871 875) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L871-2(lines 871 875) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 612 623) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L858 garLoopResultBuilder]: For program point L616-1(lines 612 623) no Hoare annotation was computed. [2022-02-20 18:11:10,689 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 612 623) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:10,692 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:10,693 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:11:10,695 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:10,695 WARN L170 areAnnotationChecker]: L628-1 has no Hoare annotation [2022-02-20 18:11:10,695 WARN L170 areAnnotationChecker]: L628-1 has no Hoare annotation [2022-02-20 18:11:10,695 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-02-20 18:11:10,701 WARN L170 areAnnotationChecker]: L711-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L743 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L616-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L616-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L628-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L711-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L711-1 has no Hoare annotation [2022-02-20 18:11:10,702 WARN L170 areAnnotationChecker]: L453-1 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L743 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L743 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L616-1 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L758-1 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L711-1 has no Hoare annotation [2022-02-20 18:11:10,703 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L769 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L718-1 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L453-1 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L681 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L681 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L758-1 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L939-1 has no Hoare annotation [2022-02-20 18:11:10,704 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L458 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L929-1 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L718-1 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L949 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L949 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L890 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L427 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L458 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L535 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L939 has no Hoare annotation [2022-02-20 18:11:10,705 WARN L170 areAnnotationChecker]: L939 has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: L890-2 has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:10,706 WARN L170 areAnnotationChecker]: L461 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L461 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L535 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L535 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L939-1 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L431 has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:10,707 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2022-02-20 18:11:10,708 WARN L170 areAnnotationChecker]: L535-2 has no Hoare annotation [2022-02-20 18:11:10,708 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L773 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L553 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L553 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L535-2 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2022-02-20 18:11:10,710 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L758-1 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L758-1 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L921 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L929 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L929 has no Hoare annotation [2022-02-20 18:11:10,713 WARN L170 areAnnotationChecker]: L929-1 has no Hoare annotation [2022-02-20 18:11:10,714 INFO L163 areAnnotationChecker]: CFG has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:11:10,749 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:11:10 BoogieIcfgContainer [2022-02-20 18:11:10,749 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:11:10,749 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:11:10,749 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:11:10,749 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:11:10,750 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57" (3/4) ... [2022-02-20 18:11:10,751 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:10,755 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:11:10,759 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-02-20 18:11:10,760 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:11:10,760 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:11:10,760 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:11:10,760 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:11:10,761 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:10,761 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:10,779 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:11:10,780 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2022-02-20 18:11:10,780 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) [2022-02-20 18:11:10,781 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,781 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((1 == systemActive && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((((1 == systemActive && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) || !(1 == systemActive)) || ((((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && \result == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && tmp == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,783 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((tmp___0 == 0 && tmp == 1) && \result == 0) && \result == 1)) || !(1 == systemActive)) [2022-02-20 18:11:10,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:10,784 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) [2022-02-20 18:11:10,811 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:11:10,811 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:11:10,812 INFO L158 Benchmark]: Toolchain (without parser) took 14683.36ms. Allocated memory was 115.3MB in the beginning and 201.3MB in the end (delta: 86.0MB). Free memory was 72.6MB in the beginning and 101.5MB in the end (delta: -28.8MB). Peak memory consumption was 58.5MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,817 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 115.3MB. Free memory is still 90.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:10,817 INFO L158 Benchmark]: CACSL2BoogieTranslator took 428.38ms. Allocated memory is still 115.3MB. Free memory was 72.4MB in the beginning and 78.0MB in the end (delta: -5.6MB). Peak memory consumption was 8.6MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,817 INFO L158 Benchmark]: Boogie Procedure Inliner took 42.97ms. Allocated memory is still 115.3MB. Free memory was 78.0MB in the beginning and 75.2MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,817 INFO L158 Benchmark]: Boogie Preprocessor took 29.75ms. Allocated memory is still 115.3MB. Free memory was 75.2MB in the beginning and 73.4MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:10,817 INFO L158 Benchmark]: RCFGBuilder took 531.43ms. Allocated memory is still 115.3MB. Free memory was 73.4MB in the beginning and 52.5MB in the end (delta: 21.0MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,818 INFO L158 Benchmark]: TraceAbstraction took 13584.02ms. Allocated memory was 115.3MB in the beginning and 201.3MB in the end (delta: 86.0MB). Free memory was 52.1MB in the beginning and 107.8MB in the end (delta: -55.6MB). Peak memory consumption was 82.9MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,818 INFO L158 Benchmark]: Witness Printer took 62.00ms. Allocated memory is still 201.3MB. Free memory was 107.8MB in the beginning and 101.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:11:10,818 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 115.3MB. Free memory is still 90.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 428.38ms. Allocated memory is still 115.3MB. Free memory was 72.4MB in the beginning and 78.0MB in the end (delta: -5.6MB). Peak memory consumption was 8.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 42.97ms. Allocated memory is still 115.3MB. Free memory was 78.0MB in the beginning and 75.2MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.75ms. Allocated memory is still 115.3MB. Free memory was 75.2MB in the beginning and 73.4MB in the end (delta: 1.8MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 531.43ms. Allocated memory is still 115.3MB. Free memory was 73.4MB in the beginning and 52.5MB in the end (delta: 21.0MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * TraceAbstraction took 13584.02ms. Allocated memory was 115.3MB in the beginning and 201.3MB in the end (delta: 86.0MB). Free memory was 52.1MB in the beginning and 107.8MB in the end (delta: -55.6MB). Peak memory consumption was 82.9MB. Max. memory is 16.1GB. * Witness Printer took 62.00ms. Allocated memory is still 201.3MB. Free memory was 107.8MB in the beginning and 101.5MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 553]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.5s, OverallIterations: 13, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 7.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1662 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1640 mSDsluCounter, 4025 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2785 mSDsCounter, 357 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1639 IncrementalHoareTripleChecker+Invalid, 1996 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 357 mSolverCounterUnsat, 1240 mSDtfsCounter, 1639 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 486 GetRequests, 356 SyntacticMatches, 8 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 256 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=565occurred in iteration=12, InterpolantAutomatonStates: 118, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 171 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 999 PreInvPairs, 1082 NumberOfFragments, 1008 HoareAnnotationTreeSize, 999 FomulaSimplifications, 1371 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 39 FomulaSimplificationsInter, 3276 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 840 NumberOfCodeBlocks, 840 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 902 ConstructedInterpolants, 0 QuantifiedInterpolants, 1767 SizeOfPredicates, 8 NumberOfNonLiveVariables, 951 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 264/294 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((1 == systemActive && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((((1 == systemActive && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp) || !(1 == systemActive)) || ((((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((tmp == 1 && pumpRunning == 0) && waterLevel == 1) && \result == 1)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 900]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 798]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 583]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (((tmp___0 == 0 && tmp == 1) && \result == 0) && \result == 1)) || !(1 == systemActive)) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 600]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && tmp == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) && tmp == systemActive) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((!(1 == systemActive) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || ((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-02-20 18:11:10,850 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE