./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:10:56,125 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:10:56,127 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:10:56,153 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:10:56,153 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:10:56,154 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:10:56,155 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:10:56,156 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:10:56,157 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:10:56,157 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:10:56,158 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:10:56,158 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:10:56,159 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:10:56,160 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:10:56,161 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:10:56,162 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:10:56,167 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:10:56,170 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:10:56,171 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:10:56,173 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:10:56,178 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:10:56,179 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:10:56,179 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:10:56,183 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:10:56,185 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:10:56,187 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:10:56,188 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:10:56,188 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:10:56,189 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:10:56,190 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:10:56,190 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:10:56,190 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:10:56,191 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:10:56,192 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:10:56,193 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:10:56,193 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:10:56,194 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:10:56,194 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:10:56,194 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:10:56,195 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:10:56,195 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:10:56,196 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:10:56,224 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:10:56,224 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:10:56,225 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:10:56,225 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:10:56,226 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:10:56,226 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:10:56,226 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:10:56,226 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:10:56,227 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:10:56,227 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:10:56,227 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:10:56,228 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:10:56,229 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:10:56,229 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:10:56,229 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:10:56,229 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:10:56,229 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:10:56,229 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:10:56,230 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:10:56,230 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:10:56,230 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:10:56,230 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:10:56,230 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:10:56,230 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:10:56,231 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:10:56,232 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:10:56,232 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:10:56,232 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2165aefdca75c2370f155996346c5c4ea8ed352d96946243b70bd7ef162ab29f [2022-02-20 18:10:56,387 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:10:56,407 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:10:56,409 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:10:56,410 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:10:56,411 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:10:56,412 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2022-02-20 18:10:56,461 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/679a6476b/173fdf5027bd4260943bebd5aaa34652/FLAG9d185a2ee [2022-02-20 18:10:56,830 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:10:56,830 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c [2022-02-20 18:10:56,836 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/679a6476b/173fdf5027bd4260943bebd5aaa34652/FLAG9d185a2ee [2022-02-20 18:10:56,850 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/679a6476b/173fdf5027bd4260943bebd5aaa34652 [2022-02-20 18:10:56,851 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:10:56,854 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:10:56,857 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:10:56,857 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:10:56,859 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:10:56,863 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,864 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@21b66682 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:56, skipping insertion in model container [2022-02-20 18:10:56,864 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:10:56" (1/1) ... [2022-02-20 18:10:56,868 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:10:56,889 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:10:57,070 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2022-02-20 18:10:57,113 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:10:57,128 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:10:57,156 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product51.cil.c[8940,8953] [2022-02-20 18:10:57,197 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:10:57,214 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:10:57,218 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57 WrapperNode [2022-02-20 18:10:57,218 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:10:57,219 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:10:57,219 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:10:57,220 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:10:57,224 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,245 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,271 INFO L137 Inliner]: procedures = 56, calls = 156, calls flagged for inlining = 24, calls inlined = 20, statements flattened = 260 [2022-02-20 18:10:57,271 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:10:57,272 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:10:57,272 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:10:57,272 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:10:57,277 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,277 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,279 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,279 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,289 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,292 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,304 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,306 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:10:57,306 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:10:57,307 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:10:57,307 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:10:57,307 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (1/1) ... [2022-02-20 18:10:57,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:10:57,334 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:10:57,347 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:10:57,351 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:10:57,370 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:10:57,370 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:10:57,370 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:10:57,370 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:10:57,370 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:10:57,370 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:10:57,371 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:10:57,371 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:10:57,371 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:10:57,371 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:10:57,371 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:10:57,371 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:10:57,430 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:10:57,432 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:10:57,718 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:10:57,724 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:10:57,724 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:10:57,725 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57 BoogieIcfgContainer [2022-02-20 18:10:57,725 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:10:57,726 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:10:57,726 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:10:57,729 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:10:57,729 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:10:56" (1/3) ... [2022-02-20 18:10:57,729 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ec8edf4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:10:57, skipping insertion in model container [2022-02-20 18:10:57,729 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:10:57" (2/3) ... [2022-02-20 18:10:57,729 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3ec8edf4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:10:57, skipping insertion in model container [2022-02-20 18:10:57,730 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57" (3/3) ... [2022-02-20 18:10:57,730 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product51.cil.c [2022-02-20 18:10:57,734 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:10:57,734 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:10:57,763 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:10:57,767 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:10:57,767 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:10:57,785 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:10:57,790 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-02-20 18:10:57,791 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:57,791 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:57,792 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:57,798 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:57,798 INFO L85 PathProgramCache]: Analyzing trace with hash -883530062, now seen corresponding path program 1 times [2022-02-20 18:10:57,807 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:57,808 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [97629836] [2022-02-20 18:10:57,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:57,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:57,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {92#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {92#true} is VALID [2022-02-20 18:10:58,006 INFO L290 TraceCheckUtils]: 1: Hoare triple {92#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {92#true} is VALID [2022-02-20 18:10:58,007 INFO L290 TraceCheckUtils]: 2: Hoare triple {92#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {92#true} is VALID [2022-02-20 18:10:58,007 INFO L290 TraceCheckUtils]: 3: Hoare triple {92#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {92#true} is VALID [2022-02-20 18:10:58,008 INFO L290 TraceCheckUtils]: 4: Hoare triple {92#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {92#true} is VALID [2022-02-20 18:10:58,008 INFO L290 TraceCheckUtils]: 5: Hoare triple {92#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {92#true} is VALID [2022-02-20 18:10:58,008 INFO L290 TraceCheckUtils]: 6: Hoare triple {92#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {92#true} is VALID [2022-02-20 18:10:58,009 INFO L290 TraceCheckUtils]: 7: Hoare triple {92#true} assume false; {93#false} is VALID [2022-02-20 18:10:58,009 INFO L272 TraceCheckUtils]: 8: Hoare triple {93#false} call cleanup(); {93#false} is VALID [2022-02-20 18:10:58,009 INFO L290 TraceCheckUtils]: 9: Hoare triple {93#false} havoc ~i~0;havoc ~__cil_tmp2~0; {93#false} is VALID [2022-02-20 18:10:58,009 INFO L272 TraceCheckUtils]: 10: Hoare triple {93#false} call timeShift(); {93#false} is VALID [2022-02-20 18:10:58,010 INFO L290 TraceCheckUtils]: 11: Hoare triple {93#false} assume !(0 != ~pumpRunning~0); {93#false} is VALID [2022-02-20 18:10:58,010 INFO L290 TraceCheckUtils]: 12: Hoare triple {93#false} assume !(0 != ~systemActive~0); {93#false} is VALID [2022-02-20 18:10:58,010 INFO L290 TraceCheckUtils]: 13: Hoare triple {93#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {93#false} is VALID [2022-02-20 18:10:58,010 INFO L290 TraceCheckUtils]: 14: Hoare triple {93#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {93#false} is VALID [2022-02-20 18:10:58,011 INFO L290 TraceCheckUtils]: 15: Hoare triple {93#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {93#false} is VALID [2022-02-20 18:10:58,011 INFO L290 TraceCheckUtils]: 16: Hoare triple {93#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {93#false} is VALID [2022-02-20 18:10:58,011 INFO L290 TraceCheckUtils]: 17: Hoare triple {93#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {93#false} is VALID [2022-02-20 18:10:58,011 INFO L290 TraceCheckUtils]: 18: Hoare triple {93#false} assume !false; {93#false} is VALID [2022-02-20 18:10:58,012 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:58,012 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:58,012 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [97629836] [2022-02-20 18:10:58,013 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [97629836] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:58,013 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:58,013 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:10:58,015 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2060021591] [2022-02-20 18:10:58,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:58,020 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:10:58,021 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:58,024 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,049 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,049 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:10:58,049 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:10:58,067 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:10:58,070 INFO L87 Difference]: Start difference. First operand has 89 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 9 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,175 INFO L93 Difference]: Finished difference Result 170 states and 233 transitions. [2022-02-20 18:10:58,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:10:58,175 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:10:58,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:58,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 233 transitions. [2022-02-20 18:10:58,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 233 transitions. [2022-02-20 18:10:58,195 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 233 transitions. [2022-02-20 18:10:58,367 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 233 edges. 233 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,378 INFO L225 Difference]: With dead ends: 170 [2022-02-20 18:10:58,379 INFO L226 Difference]: Without dead ends: 80 [2022-02-20 18:10:58,382 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:10:58,385 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:58,386 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:10:58,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-02-20 18:10:58,417 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-02-20 18:10:58,417 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:58,419 INFO L82 GeneralOperation]: Start isEquivalent. First operand 80 states. Second operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:10:58,422 INFO L74 IsIncluded]: Start isIncluded. First operand 80 states. Second operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:10:58,423 INFO L87 Difference]: Start difference. First operand 80 states. Second operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:10:58,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,436 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2022-02-20 18:10:58,436 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 104 transitions. [2022-02-20 18:10:58,437 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,437 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,439 INFO L74 IsIncluded]: Start isIncluded. First operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 80 states. [2022-02-20 18:10:58,440 INFO L87 Difference]: Start difference. First operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 80 states. [2022-02-20 18:10:58,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,453 INFO L93 Difference]: Finished difference Result 80 states and 104 transitions. [2022-02-20 18:10:58,453 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 104 transitions. [2022-02-20 18:10:58,455 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,455 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,455 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:58,455 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:58,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:10:58,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 104 transitions. [2022-02-20 18:10:58,463 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 104 transitions. Word has length 19 [2022-02-20 18:10:58,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:58,463 INFO L470 AbstractCegarLoop]: Abstraction has 80 states and 104 transitions. [2022-02-20 18:10:58,463 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,463 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 104 transitions. [2022-02-20 18:10:58,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-02-20 18:10:58,464 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:58,464 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:58,464 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:10:58,465 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:58,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:58,465 INFO L85 PathProgramCache]: Analyzing trace with hash -1969487031, now seen corresponding path program 1 times [2022-02-20 18:10:58,466 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:58,466 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [298469455] [2022-02-20 18:10:58,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:58,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:58,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,528 INFO L290 TraceCheckUtils]: 0: Hoare triple {619#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {619#true} is VALID [2022-02-20 18:10:58,528 INFO L290 TraceCheckUtils]: 1: Hoare triple {619#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {619#true} is VALID [2022-02-20 18:10:58,528 INFO L290 TraceCheckUtils]: 2: Hoare triple {619#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {619#true} is VALID [2022-02-20 18:10:58,528 INFO L290 TraceCheckUtils]: 3: Hoare triple {619#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {619#true} is VALID [2022-02-20 18:10:58,529 INFO L290 TraceCheckUtils]: 4: Hoare triple {619#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {619#true} is VALID [2022-02-20 18:10:58,529 INFO L290 TraceCheckUtils]: 5: Hoare triple {619#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {619#true} is VALID [2022-02-20 18:10:58,529 INFO L290 TraceCheckUtils]: 6: Hoare triple {619#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {621#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:10:58,530 INFO L290 TraceCheckUtils]: 7: Hoare triple {621#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {621#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:10:58,530 INFO L290 TraceCheckUtils]: 8: Hoare triple {621#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {620#false} is VALID [2022-02-20 18:10:58,530 INFO L272 TraceCheckUtils]: 9: Hoare triple {620#false} call cleanup(); {620#false} is VALID [2022-02-20 18:10:58,530 INFO L290 TraceCheckUtils]: 10: Hoare triple {620#false} havoc ~i~0;havoc ~__cil_tmp2~0; {620#false} is VALID [2022-02-20 18:10:58,531 INFO L272 TraceCheckUtils]: 11: Hoare triple {620#false} call timeShift(); {620#false} is VALID [2022-02-20 18:10:58,531 INFO L290 TraceCheckUtils]: 12: Hoare triple {620#false} assume !(0 != ~pumpRunning~0); {620#false} is VALID [2022-02-20 18:10:58,531 INFO L290 TraceCheckUtils]: 13: Hoare triple {620#false} assume !(0 != ~systemActive~0); {620#false} is VALID [2022-02-20 18:10:58,531 INFO L290 TraceCheckUtils]: 14: Hoare triple {620#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {620#false} is VALID [2022-02-20 18:10:58,531 INFO L290 TraceCheckUtils]: 15: Hoare triple {620#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {620#false} is VALID [2022-02-20 18:10:58,532 INFO L290 TraceCheckUtils]: 16: Hoare triple {620#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {620#false} is VALID [2022-02-20 18:10:58,532 INFO L290 TraceCheckUtils]: 17: Hoare triple {620#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {620#false} is VALID [2022-02-20 18:10:58,532 INFO L290 TraceCheckUtils]: 18: Hoare triple {620#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {620#false} is VALID [2022-02-20 18:10:58,532 INFO L290 TraceCheckUtils]: 19: Hoare triple {620#false} assume !false; {620#false} is VALID [2022-02-20 18:10:58,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:58,533 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:58,533 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [298469455] [2022-02-20 18:10:58,533 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [298469455] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:58,533 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:58,533 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:10:58,533 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086054692] [2022-02-20 18:10:58,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:58,535 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:10:58,535 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:58,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,549 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,549 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:10:58,550 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:10:58,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:10:58,551 INFO L87 Difference]: Start difference. First operand 80 states and 104 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,646 INFO L93 Difference]: Finished difference Result 122 states and 158 transitions. [2022-02-20 18:10:58,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:10:58,646 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:10:58,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:58,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 158 transitions. [2022-02-20 18:10:58,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 158 transitions. [2022-02-20 18:10:58,656 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 158 transitions. [2022-02-20 18:10:58,758 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 158 edges. 158 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,762 INFO L225 Difference]: With dead ends: 122 [2022-02-20 18:10:58,762 INFO L226 Difference]: Without dead ends: 71 [2022-02-20 18:10:58,768 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:10:58,770 INFO L933 BasicCegarLoop]: 91 mSDtfsCounter, 16 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:58,770 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 161 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:10:58,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-02-20 18:10:58,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2022-02-20 18:10:58,782 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:58,783 INFO L82 GeneralOperation]: Start isEquivalent. First operand 71 states. Second operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:58,783 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:58,783 INFO L87 Difference]: Start difference. First operand 71 states. Second operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:58,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,786 INFO L93 Difference]: Finished difference Result 71 states and 92 transitions. [2022-02-20 18:10:58,787 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 92 transitions. [2022-02-20 18:10:58,788 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,788 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,788 INFO L74 IsIncluded]: Start isIncluded. First operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) Second operand 71 states. [2022-02-20 18:10:58,788 INFO L87 Difference]: Start difference. First operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) Second operand 71 states. [2022-02-20 18:10:58,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:58,791 INFO L93 Difference]: Finished difference Result 71 states and 92 transitions. [2022-02-20 18:10:58,791 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 92 transitions. [2022-02-20 18:10:58,791 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:58,791 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:58,791 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:58,792 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:58,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 63 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 6 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:10:58,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 92 transitions. [2022-02-20 18:10:58,794 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 92 transitions. Word has length 20 [2022-02-20 18:10:58,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:58,794 INFO L470 AbstractCegarLoop]: Abstraction has 71 states and 92 transitions. [2022-02-20 18:10:58,795 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,795 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 92 transitions. [2022-02-20 18:10:58,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-02-20 18:10:58,795 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:58,795 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:58,796 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:10:58,796 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:58,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:58,796 INFO L85 PathProgramCache]: Analyzing trace with hash 389175485, now seen corresponding path program 1 times [2022-02-20 18:10:58,797 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:58,797 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257373058] [2022-02-20 18:10:58,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:58,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:58,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:58,863 INFO L290 TraceCheckUtils]: 0: Hoare triple {1045#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1047#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,864 INFO L290 TraceCheckUtils]: 1: Hoare triple {1047#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1047#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,864 INFO L290 TraceCheckUtils]: 2: Hoare triple {1047#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1047#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:10:58,864 INFO L290 TraceCheckUtils]: 3: Hoare triple {1047#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1048#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} is VALID [2022-02-20 18:10:58,865 INFO L290 TraceCheckUtils]: 4: Hoare triple {1048#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {1049#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} is VALID [2022-02-20 18:10:58,865 INFO L290 TraceCheckUtils]: 5: Hoare triple {1049#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,866 INFO L290 TraceCheckUtils]: 6: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,866 INFO L290 TraceCheckUtils]: 7: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume !false; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,867 INFO L290 TraceCheckUtils]: 8: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0#1 < 4; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,867 INFO L290 TraceCheckUtils]: 9: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,868 INFO L290 TraceCheckUtils]: 10: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~6#1); {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,869 INFO L290 TraceCheckUtils]: 11: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,872 INFO L290 TraceCheckUtils]: 12: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~3#1); {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,873 INFO L290 TraceCheckUtils]: 13: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,873 INFO L290 TraceCheckUtils]: 14: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0#1; {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,874 INFO L272 TraceCheckUtils]: 15: Hoare triple {1050#(not (= 0 ~systemActive~0))} call timeShift(); {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,874 INFO L290 TraceCheckUtils]: 16: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1050#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:10:58,878 INFO L290 TraceCheckUtils]: 17: Hoare triple {1050#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1046#false} is VALID [2022-02-20 18:10:58,878 INFO L290 TraceCheckUtils]: 18: Hoare triple {1046#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {1046#false} is VALID [2022-02-20 18:10:58,878 INFO L290 TraceCheckUtils]: 19: Hoare triple {1046#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {1046#false} is VALID [2022-02-20 18:10:58,878 INFO L290 TraceCheckUtils]: 20: Hoare triple {1046#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {1046#false} is VALID [2022-02-20 18:10:58,878 INFO L290 TraceCheckUtils]: 21: Hoare triple {1046#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {1046#false} is VALID [2022-02-20 18:10:58,879 INFO L290 TraceCheckUtils]: 22: Hoare triple {1046#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1046#false} is VALID [2022-02-20 18:10:58,879 INFO L290 TraceCheckUtils]: 23: Hoare triple {1046#false} assume !false; {1046#false} is VALID [2022-02-20 18:10:58,879 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:58,879 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:58,879 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257373058] [2022-02-20 18:10:58,880 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1257373058] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:58,880 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:58,880 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:10:58,880 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118222560] [2022-02-20 18:10:58,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:58,881 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-02-20 18:10:58,881 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:58,881 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:58,903 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:58,903 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:10:58,903 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:58,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:10:58,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:10:58,904 INFO L87 Difference]: Start difference. First operand 71 states and 92 transitions. Second operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,328 INFO L93 Difference]: Finished difference Result 236 states and 313 transitions. [2022-02-20 18:10:59,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:10:59,328 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-02-20 18:10:59,328 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:59,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 313 transitions. [2022-02-20 18:10:59,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 313 transitions. [2022-02-20 18:10:59,339 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 313 transitions. [2022-02-20 18:10:59,553 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 313 edges. 313 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:59,557 INFO L225 Difference]: With dead ends: 236 [2022-02-20 18:10:59,557 INFO L226 Difference]: Without dead ends: 172 [2022-02-20 18:10:59,558 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:10:59,558 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 191 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 454 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:10:59,558 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [191 Valid, 454 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:10:59,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2022-02-20 18:10:59,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 166. [2022-02-20 18:10:59,568 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:10:59,568 INFO L82 GeneralOperation]: Start isEquivalent. First operand 172 states. Second operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2022-02-20 18:10:59,569 INFO L74 IsIncluded]: Start isIncluded. First operand 172 states. Second operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2022-02-20 18:10:59,569 INFO L87 Difference]: Start difference. First operand 172 states. Second operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2022-02-20 18:10:59,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,574 INFO L93 Difference]: Finished difference Result 172 states and 224 transitions. [2022-02-20 18:10:59,574 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 224 transitions. [2022-02-20 18:10:59,575 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:59,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:59,575 INFO L74 IsIncluded]: Start isIncluded. First operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) Second operand 172 states. [2022-02-20 18:10:59,576 INFO L87 Difference]: Start difference. First operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) Second operand 172 states. [2022-02-20 18:10:59,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,580 INFO L93 Difference]: Finished difference Result 172 states and 224 transitions. [2022-02-20 18:10:59,581 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 224 transitions. [2022-02-20 18:10:59,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:10:59,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:10:59,581 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:10:59,581 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:10:59,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 127 states have (on average 1.3779527559055118) internal successors, (175), 145 states have internal predecessors, (175), 22 states have call successors, (22), 16 states have call predecessors, (22), 16 states have return successors, (23), 14 states have call predecessors, (23), 22 states have call successors, (23) [2022-02-20 18:10:59,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 220 transitions. [2022-02-20 18:10:59,586 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 220 transitions. Word has length 24 [2022-02-20 18:10:59,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:10:59,587 INFO L470 AbstractCegarLoop]: Abstraction has 166 states and 220 transitions. [2022-02-20 18:10:59,587 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 5 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,587 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 220 transitions. [2022-02-20 18:10:59,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-02-20 18:10:59,587 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:10:59,587 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:10:59,588 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:10:59,588 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:10:59,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:10:59,588 INFO L85 PathProgramCache]: Analyzing trace with hash 1254129459, now seen corresponding path program 1 times [2022-02-20 18:10:59,588 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:10:59,588 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711317010] [2022-02-20 18:10:59,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:10:59,589 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:10:59,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:10:59,655 INFO L290 TraceCheckUtils]: 0: Hoare triple {1970#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,655 INFO L290 TraceCheckUtils]: 1: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,656 INFO L290 TraceCheckUtils]: 2: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,656 INFO L290 TraceCheckUtils]: 3: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,656 INFO L290 TraceCheckUtils]: 4: Hoare triple {1972#(= ~waterLevel~0 1)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,657 INFO L290 TraceCheckUtils]: 5: Hoare triple {1972#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,657 INFO L290 TraceCheckUtils]: 6: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,657 INFO L290 TraceCheckUtils]: 7: Hoare triple {1972#(= ~waterLevel~0 1)} assume !false; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,657 INFO L290 TraceCheckUtils]: 8: Hoare triple {1972#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,658 INFO L290 TraceCheckUtils]: 9: Hoare triple {1972#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,658 INFO L290 TraceCheckUtils]: 10: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~6#1); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,658 INFO L290 TraceCheckUtils]: 11: Hoare triple {1972#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,659 INFO L290 TraceCheckUtils]: 12: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~3#1); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,659 INFO L290 TraceCheckUtils]: 13: Hoare triple {1972#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,659 INFO L290 TraceCheckUtils]: 14: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet29#1 && test_#t~nondet29#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet29#1;havoc test_#t~nondet29#1; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,660 INFO L290 TraceCheckUtils]: 15: Hoare triple {1972#(= ~waterLevel~0 1)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,660 INFO L290 TraceCheckUtils]: 16: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,660 INFO L290 TraceCheckUtils]: 17: Hoare triple {1972#(= ~waterLevel~0 1)} ~systemActive~0 := 0; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,661 INFO L290 TraceCheckUtils]: 18: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :end_inline_stopSystem } true; {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,661 INFO L272 TraceCheckUtils]: 19: Hoare triple {1972#(= ~waterLevel~0 1)} call timeShift(); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,661 INFO L290 TraceCheckUtils]: 20: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,662 INFO L290 TraceCheckUtils]: 21: Hoare triple {1972#(= ~waterLevel~0 1)} assume !(0 != ~systemActive~0); {1972#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:10:59,662 INFO L290 TraceCheckUtils]: 22: Hoare triple {1972#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {1973#(= |timeShift_getWaterLevel_#res#1| 1)} is VALID [2022-02-20 18:10:59,663 INFO L290 TraceCheckUtils]: 23: Hoare triple {1973#(= |timeShift_getWaterLevel_#res#1| 1)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {1974#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|) 0)} is VALID [2022-02-20 18:10:59,663 INFO L290 TraceCheckUtils]: 24: Hoare triple {1974#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|) 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {1971#false} is VALID [2022-02-20 18:10:59,663 INFO L290 TraceCheckUtils]: 25: Hoare triple {1971#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {1971#false} is VALID [2022-02-20 18:10:59,663 INFO L290 TraceCheckUtils]: 26: Hoare triple {1971#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1971#false} is VALID [2022-02-20 18:10:59,663 INFO L290 TraceCheckUtils]: 27: Hoare triple {1971#false} assume !false; {1971#false} is VALID [2022-02-20 18:10:59,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:10:59,664 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:10:59,664 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711317010] [2022-02-20 18:10:59,664 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711317010] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:10:59,664 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:10:59,664 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:10:59,665 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036959893] [2022-02-20 18:10:59,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:10:59,665 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-02-20 18:10:59,665 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:10:59,666 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,680 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:10:59,681 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:10:59,681 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:10:59,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:10:59,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:10:59,682 INFO L87 Difference]: Start difference. First operand 166 states and 220 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:10:59,898 INFO L93 Difference]: Finished difference Result 467 states and 645 transitions. [2022-02-20 18:10:59,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:10:59,899 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-02-20 18:10:59,899 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:10:59,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 261 transitions. [2022-02-20 18:10:59,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:10:59,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 261 transitions. [2022-02-20 18:10:59,907 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 261 transitions. [2022-02-20 18:11:00,063 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 261 edges. 261 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,071 INFO L225 Difference]: With dead ends: 467 [2022-02-20 18:11:00,071 INFO L226 Difference]: Without dead ends: 308 [2022-02-20 18:11:00,072 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:00,073 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 63 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 361 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:00,073 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [63 Valid, 361 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:00,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-02-20 18:11:00,087 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 308. [2022-02-20 18:11:00,088 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:00,088 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) [2022-02-20 18:11:00,089 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) [2022-02-20 18:11:00,090 INFO L87 Difference]: Start difference. First operand 308 states. Second operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) [2022-02-20 18:11:00,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,099 INFO L93 Difference]: Finished difference Result 308 states and 410 transitions. [2022-02-20 18:11:00,099 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 410 transitions. [2022-02-20 18:11:00,099 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,100 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,100 INFO L74 IsIncluded]: Start isIncluded. First operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) Second operand 308 states. [2022-02-20 18:11:00,101 INFO L87 Difference]: Start difference. First operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) Second operand 308 states. [2022-02-20 18:11:00,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,110 INFO L93 Difference]: Finished difference Result 308 states and 410 transitions. [2022-02-20 18:11:00,110 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 410 transitions. [2022-02-20 18:11:00,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,110 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,111 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:00,111 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:00,111 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 234 states have (on average 1.3504273504273505) internal successors, (316), 266 states have internal predecessors, (316), 44 states have call successors, (44), 32 states have call predecessors, (44), 29 states have return successors, (50), 25 states have call predecessors, (50), 44 states have call successors, (50) [2022-02-20 18:11:00,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 410 transitions. [2022-02-20 18:11:00,120 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 410 transitions. Word has length 28 [2022-02-20 18:11:00,121 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:00,121 INFO L470 AbstractCegarLoop]: Abstraction has 308 states and 410 transitions. [2022-02-20 18:11:00,121 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,121 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 410 transitions. [2022-02-20 18:11:00,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-02-20 18:11:00,122 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:00,122 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:00,122 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:11:00,122 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:00,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:00,122 INFO L85 PathProgramCache]: Analyzing trace with hash 183678264, now seen corresponding path program 1 times [2022-02-20 18:11:00,122 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:00,122 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1111291895] [2022-02-20 18:11:00,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:00,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:00,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,164 INFO L290 TraceCheckUtils]: 0: Hoare triple {3698#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,164 INFO L290 TraceCheckUtils]: 1: Hoare triple {3700#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,164 INFO L290 TraceCheckUtils]: 2: Hoare triple {3700#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,165 INFO L290 TraceCheckUtils]: 3: Hoare triple {3700#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,165 INFO L290 TraceCheckUtils]: 4: Hoare triple {3700#(= ~pumpRunning~0 0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,165 INFO L290 TraceCheckUtils]: 5: Hoare triple {3700#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,166 INFO L290 TraceCheckUtils]: 6: Hoare triple {3700#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,166 INFO L290 TraceCheckUtils]: 7: Hoare triple {3700#(= ~pumpRunning~0 0)} assume !false; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,166 INFO L290 TraceCheckUtils]: 8: Hoare triple {3700#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,167 INFO L290 TraceCheckUtils]: 9: Hoare triple {3700#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,167 INFO L290 TraceCheckUtils]: 10: Hoare triple {3700#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~6#1); {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,167 INFO L290 TraceCheckUtils]: 11: Hoare triple {3700#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,168 INFO L290 TraceCheckUtils]: 12: Hoare triple {3700#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,168 INFO L290 TraceCheckUtils]: 13: Hoare triple {3700#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,168 INFO L290 TraceCheckUtils]: 14: Hoare triple {3700#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet29#1 && test_#t~nondet29#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet29#1;havoc test_#t~nondet29#1; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,168 INFO L290 TraceCheckUtils]: 15: Hoare triple {3700#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,169 INFO L290 TraceCheckUtils]: 16: Hoare triple {3700#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,169 INFO L290 TraceCheckUtils]: 17: Hoare triple {3700#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,169 INFO L290 TraceCheckUtils]: 18: Hoare triple {3700#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,170 INFO L272 TraceCheckUtils]: 19: Hoare triple {3700#(= ~pumpRunning~0 0)} call timeShift(); {3700#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,170 INFO L290 TraceCheckUtils]: 20: Hoare triple {3700#(= ~pumpRunning~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {3699#false} is VALID [2022-02-20 18:11:00,170 INFO L290 TraceCheckUtils]: 21: Hoare triple {3699#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {3699#false} is VALID [2022-02-20 18:11:00,170 INFO L290 TraceCheckUtils]: 22: Hoare triple {3699#false} assume { :end_inline_lowerWaterLevel } true; {3699#false} is VALID [2022-02-20 18:11:00,170 INFO L290 TraceCheckUtils]: 23: Hoare triple {3699#false} assume !(0 != ~systemActive~0); {3699#false} is VALID [2022-02-20 18:11:00,170 INFO L290 TraceCheckUtils]: 24: Hoare triple {3699#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L290 TraceCheckUtils]: 25: Hoare triple {3699#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L290 TraceCheckUtils]: 26: Hoare triple {3699#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L290 TraceCheckUtils]: 27: Hoare triple {3699#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L290 TraceCheckUtils]: 28: Hoare triple {3699#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L290 TraceCheckUtils]: 29: Hoare triple {3699#false} assume !false; {3699#false} is VALID [2022-02-20 18:11:00,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:00,171 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:00,171 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1111291895] [2022-02-20 18:11:00,171 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1111291895] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:00,172 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:00,172 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:00,172 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316128171] [2022-02-20 18:11:00,172 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:00,172 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-02-20 18:11:00,172 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:00,172 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,189 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,192 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:00,192 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:00,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:00,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:00,193 INFO L87 Difference]: Start difference. First operand 308 states and 410 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,313 INFO L93 Difference]: Finished difference Result 712 states and 975 transitions. [2022-02-20 18:11:00,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:00,314 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-02-20 18:11:00,314 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:00,314 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,317 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 232 transitions. [2022-02-20 18:11:00,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 232 transitions. [2022-02-20 18:11:00,319 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 232 transitions. [2022-02-20 18:11:00,450 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,462 INFO L225 Difference]: With dead ends: 712 [2022-02-20 18:11:00,462 INFO L226 Difference]: Without dead ends: 411 [2022-02-20 18:11:00,463 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:00,463 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 51 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:00,464 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [51 Valid, 152 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:00,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 411 states. [2022-02-20 18:11:00,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 411 to 400. [2022-02-20 18:11:00,477 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:00,478 INFO L82 GeneralOperation]: Start isEquivalent. First operand 411 states. Second operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) [2022-02-20 18:11:00,479 INFO L74 IsIncluded]: Start isIncluded. First operand 411 states. Second operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) [2022-02-20 18:11:00,480 INFO L87 Difference]: Start difference. First operand 411 states. Second operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) [2022-02-20 18:11:00,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,495 INFO L93 Difference]: Finished difference Result 411 states and 531 transitions. [2022-02-20 18:11:00,495 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 531 transitions. [2022-02-20 18:11:00,497 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,497 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,498 INFO L74 IsIncluded]: Start isIncluded. First operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) Second operand 411 states. [2022-02-20 18:11:00,498 INFO L87 Difference]: Start difference. First operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) Second operand 411 states. [2022-02-20 18:11:00,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:00,515 INFO L93 Difference]: Finished difference Result 411 states and 531 transitions. [2022-02-20 18:11:00,515 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 531 transitions. [2022-02-20 18:11:00,516 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:00,516 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:00,516 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:00,516 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:00,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 400 states, 310 states have (on average 1.303225806451613) internal successors, (404), 333 states have internal predecessors, (404), 47 states have call successors, (47), 45 states have call predecessors, (47), 42 states have return successors, (69), 41 states have call predecessors, (69), 47 states have call successors, (69) [2022-02-20 18:11:00,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 400 states to 400 states and 520 transitions. [2022-02-20 18:11:00,530 INFO L78 Accepts]: Start accepts. Automaton has 400 states and 520 transitions. Word has length 30 [2022-02-20 18:11:00,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:00,531 INFO L470 AbstractCegarLoop]: Abstraction has 400 states and 520 transitions. [2022-02-20 18:11:00,531 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:00,531 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 520 transitions. [2022-02-20 18:11:00,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:11:00,532 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:00,532 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:00,532 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:11:00,532 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:00,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:00,533 INFO L85 PathProgramCache]: Analyzing trace with hash 211984281, now seen corresponding path program 1 times [2022-02-20 18:11:00,533 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:00,533 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543114739] [2022-02-20 18:11:00,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:00,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:00,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:00,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:00,621 INFO L290 TraceCheckUtils]: 0: Hoare triple {6091#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6083#true} is VALID [2022-02-20 18:11:00,621 INFO L290 TraceCheckUtils]: 1: Hoare triple {6083#true} assume true; {6083#true} is VALID [2022-02-20 18:11:00,621 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6083#true} {6085#(= ~pumpRunning~0 0)} #245#return; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,622 INFO L290 TraceCheckUtils]: 0: Hoare triple {6083#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,626 INFO L290 TraceCheckUtils]: 1: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,630 INFO L290 TraceCheckUtils]: 2: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,632 INFO L290 TraceCheckUtils]: 3: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,633 INFO L290 TraceCheckUtils]: 4: Hoare triple {6085#(= ~pumpRunning~0 0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,633 INFO L290 TraceCheckUtils]: 5: Hoare triple {6085#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,633 INFO L290 TraceCheckUtils]: 6: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,634 INFO L290 TraceCheckUtils]: 7: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !false; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,634 INFO L290 TraceCheckUtils]: 8: Hoare triple {6085#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,634 INFO L290 TraceCheckUtils]: 9: Hoare triple {6085#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,635 INFO L290 TraceCheckUtils]: 10: Hoare triple {6085#(= ~pumpRunning~0 0)} assume 0 != test_~tmp~6#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,635 INFO L272 TraceCheckUtils]: 11: Hoare triple {6085#(= ~pumpRunning~0 0)} call waterRise(); {6091#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:00,635 INFO L290 TraceCheckUtils]: 12: Hoare triple {6091#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6083#true} is VALID [2022-02-20 18:11:00,635 INFO L290 TraceCheckUtils]: 13: Hoare triple {6083#true} assume true; {6083#true} is VALID [2022-02-20 18:11:00,636 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {6083#true} {6085#(= ~pumpRunning~0 0)} #245#return; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,637 INFO L290 TraceCheckUtils]: 15: Hoare triple {6085#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,637 INFO L290 TraceCheckUtils]: 16: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,637 INFO L290 TraceCheckUtils]: 17: Hoare triple {6085#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,637 INFO L290 TraceCheckUtils]: 18: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet29#1 && test_#t~nondet29#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet29#1;havoc test_#t~nondet29#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,638 INFO L290 TraceCheckUtils]: 19: Hoare triple {6085#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,638 INFO L290 TraceCheckUtils]: 20: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,638 INFO L290 TraceCheckUtils]: 21: Hoare triple {6085#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,639 INFO L290 TraceCheckUtils]: 22: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,639 INFO L272 TraceCheckUtils]: 23: Hoare triple {6085#(= ~pumpRunning~0 0)} call timeShift(); {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,639 INFO L290 TraceCheckUtils]: 24: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,639 INFO L290 TraceCheckUtils]: 25: Hoare triple {6085#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,640 INFO L290 TraceCheckUtils]: 26: Hoare triple {6085#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,640 INFO L290 TraceCheckUtils]: 27: Hoare triple {6085#(= ~pumpRunning~0 0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {6085#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:00,640 INFO L290 TraceCheckUtils]: 28: Hoare triple {6085#(= ~pumpRunning~0 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {6089#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:11:00,641 INFO L290 TraceCheckUtils]: 29: Hoare triple {6089#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {6090#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:00,641 INFO L290 TraceCheckUtils]: 30: Hoare triple {6090#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {6084#false} is VALID [2022-02-20 18:11:00,641 INFO L290 TraceCheckUtils]: 31: Hoare triple {6084#false} assume !false; {6084#false} is VALID [2022-02-20 18:11:00,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:00,641 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:00,641 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543114739] [2022-02-20 18:11:00,642 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543114739] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:00,642 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:00,642 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:00,642 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1931722259] [2022-02-20 18:11:00,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:00,642 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-02-20 18:11:00,642 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:00,643 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:00,660 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:00,661 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:00,661 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:00,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:00,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:00,661 INFO L87 Difference]: Start difference. First operand 400 states and 520 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,120 INFO L93 Difference]: Finished difference Result 499 states and 651 transitions. [2022-02-20 18:11:01,121 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:11:01,121 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-02-20 18:11:01,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:01,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 200 transitions. [2022-02-20 18:11:01,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,125 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 200 transitions. [2022-02-20 18:11:01,125 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 200 transitions. [2022-02-20 18:11:01,251 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 200 edges. 200 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,266 INFO L225 Difference]: With dead ends: 499 [2022-02-20 18:11:01,266 INFO L226 Difference]: Without dead ends: 497 [2022-02-20 18:11:01,267 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:01,268 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 124 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 173 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 378 SdHoareTripleChecker+Invalid, 206 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 173 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:01,272 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [128 Valid, 378 Invalid, 206 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 173 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:01,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 497 states. [2022-02-20 18:11:01,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 497 to 468. [2022-02-20 18:11:01,293 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:01,294 INFO L82 GeneralOperation]: Start isEquivalent. First operand 497 states. Second operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) [2022-02-20 18:11:01,295 INFO L74 IsIncluded]: Start isIncluded. First operand 497 states. Second operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) [2022-02-20 18:11:01,296 INFO L87 Difference]: Start difference. First operand 497 states. Second operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) [2022-02-20 18:11:01,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,308 INFO L93 Difference]: Finished difference Result 497 states and 645 transitions. [2022-02-20 18:11:01,309 INFO L276 IsEmpty]: Start isEmpty. Operand 497 states and 645 transitions. [2022-02-20 18:11:01,310 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,310 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,311 INFO L74 IsIncluded]: Start isIncluded. First operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) Second operand 497 states. [2022-02-20 18:11:01,312 INFO L87 Difference]: Start difference. First operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) Second operand 497 states. [2022-02-20 18:11:01,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:01,340 INFO L93 Difference]: Finished difference Result 497 states and 645 transitions. [2022-02-20 18:11:01,340 INFO L276 IsEmpty]: Start isEmpty. Operand 497 states and 645 transitions. [2022-02-20 18:11:01,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:01,342 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:01,342 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:01,342 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:01,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 363 states have (on average 1.2837465564738293) internal successors, (466), 397 states have internal predecessors, (466), 53 states have call successors, (53), 45 states have call predecessors, (53), 51 states have return successors, (88), 45 states have call predecessors, (88), 53 states have call successors, (88) [2022-02-20 18:11:01,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 607 transitions. [2022-02-20 18:11:01,357 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 607 transitions. Word has length 32 [2022-02-20 18:11:01,357 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:01,357 INFO L470 AbstractCegarLoop]: Abstraction has 468 states and 607 transitions. [2022-02-20 18:11:01,357 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-20 18:11:01,357 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 607 transitions. [2022-02-20 18:11:01,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-02-20 18:11:01,360 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:01,360 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:01,360 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:11:01,360 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:01,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:01,361 INFO L85 PathProgramCache]: Analyzing trace with hash 719750173, now seen corresponding path program 1 times [2022-02-20 18:11:01,361 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:01,361 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258313258] [2022-02-20 18:11:01,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:01,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:01,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:01,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,435 INFO L290 TraceCheckUtils]: 0: Hoare triple {8469#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8451#true} is VALID [2022-02-20 18:11:01,435 INFO L290 TraceCheckUtils]: 1: Hoare triple {8451#true} assume true; {8451#true} is VALID [2022-02-20 18:11:01,436 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {8451#true} {8451#true} #245#return; {8451#true} is VALID [2022-02-20 18:11:01,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:01,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:01,470 INFO L290 TraceCheckUtils]: 0: Hoare triple {8470#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {8451#true} is VALID [2022-02-20 18:11:01,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {8451#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {8451#true} is VALID [2022-02-20 18:11:01,471 INFO L290 TraceCheckUtils]: 2: Hoare triple {8451#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~3#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {8471#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:01,471 INFO L290 TraceCheckUtils]: 3: Hoare triple {8471#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {8472#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 4: Hoare triple {8472#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 5: Hoare triple {8452#false} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 6: Hoare triple {8452#false} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 7: Hoare triple {8452#false} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 8: Hoare triple {8452#false} assume { :end_inline_activatePump } true; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 9: Hoare triple {8452#false} assume true; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {8452#false} {8451#true} #239#return; {8452#false} is VALID [2022-02-20 18:11:01,472 INFO L290 TraceCheckUtils]: 0: Hoare triple {8451#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {8451#true} is VALID [2022-02-20 18:11:01,473 INFO L290 TraceCheckUtils]: 1: Hoare triple {8451#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {8451#true} is VALID [2022-02-20 18:11:01,473 INFO L290 TraceCheckUtils]: 2: Hoare triple {8451#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {8451#true} is VALID [2022-02-20 18:11:01,478 INFO L290 TraceCheckUtils]: 3: Hoare triple {8451#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {8453#(= |ULTIMATE.start_valid_product_#res#1| 1)} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 4: Hoare triple {8453#(= |ULTIMATE.start_valid_product_#res#1| 1)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {8454#(= |ULTIMATE.start_main_~tmp~0#1| 1)} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 5: Hoare triple {8454#(= |ULTIMATE.start_main_~tmp~0#1| 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 6: Hoare triple {8451#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 7: Hoare triple {8451#true} assume !false; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 8: Hoare triple {8451#true} assume test_~splverifierCounter~0#1 < 4; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 9: Hoare triple {8451#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L290 TraceCheckUtils]: 10: Hoare triple {8451#true} assume 0 != test_~tmp~6#1; {8451#true} is VALID [2022-02-20 18:11:01,479 INFO L272 TraceCheckUtils]: 11: Hoare triple {8451#true} call waterRise(); {8469#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 12: Hoare triple {8469#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 13: Hoare triple {8451#true} assume true; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {8451#true} {8451#true} #245#return; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 15: Hoare triple {8451#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 16: Hoare triple {8451#true} assume !(0 != test_~tmp___0~3#1); {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 17: Hoare triple {8451#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 18: Hoare triple {8451#true} assume 0 != test_~tmp___2~0#1; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L272 TraceCheckUtils]: 19: Hoare triple {8451#true} call timeShift(); {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 20: Hoare triple {8451#true} assume !(0 != ~pumpRunning~0); {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 21: Hoare triple {8451#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {8451#true} is VALID [2022-02-20 18:11:01,480 INFO L290 TraceCheckUtils]: 22: Hoare triple {8451#true} assume !(0 != ~pumpRunning~0); {8451#true} is VALID [2022-02-20 18:11:01,485 INFO L272 TraceCheckUtils]: 23: Hoare triple {8451#true} call processEnvironment__wrappee__highWaterSensor(); {8470#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:01,485 INFO L290 TraceCheckUtils]: 24: Hoare triple {8470#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {8451#true} is VALID [2022-02-20 18:11:01,485 INFO L290 TraceCheckUtils]: 25: Hoare triple {8451#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {8451#true} is VALID [2022-02-20 18:11:01,485 INFO L290 TraceCheckUtils]: 26: Hoare triple {8451#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~3#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {8471#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:01,486 INFO L290 TraceCheckUtils]: 27: Hoare triple {8471#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {8472#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:11:01,486 INFO L290 TraceCheckUtils]: 28: Hoare triple {8472#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {8452#false} is VALID [2022-02-20 18:11:01,486 INFO L290 TraceCheckUtils]: 29: Hoare triple {8452#false} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {8452#false} is VALID [2022-02-20 18:11:01,486 INFO L290 TraceCheckUtils]: 30: Hoare triple {8452#false} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {8452#false} is VALID [2022-02-20 18:11:01,486 INFO L290 TraceCheckUtils]: 31: Hoare triple {8452#false} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 32: Hoare triple {8452#false} assume { :end_inline_activatePump } true; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 33: Hoare triple {8452#false} assume true; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {8452#false} {8451#true} #239#return; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 35: Hoare triple {8452#false} assume { :end_inline_processEnvironment } true; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 36: Hoare triple {8452#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 37: Hoare triple {8452#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 38: Hoare triple {8452#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 39: Hoare triple {8452#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 40: Hoare triple {8452#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {8452#false} is VALID [2022-02-20 18:11:01,487 INFO L290 TraceCheckUtils]: 41: Hoare triple {8452#false} assume !false; {8452#false} is VALID [2022-02-20 18:11:01,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:01,488 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:01,488 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258313258] [2022-02-20 18:11:01,488 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258313258] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:01,488 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:01,488 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:11:01,488 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1454128458] [2022-02-20 18:11:01,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:01,488 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:01,489 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:01,489 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:01,509 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:01,509 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:11:01,509 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:01,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:11:01,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:11:01,510 INFO L87 Difference]: Start difference. First operand 468 states and 607 transitions. Second operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,245 INFO L93 Difference]: Finished difference Result 1033 states and 1392 transitions. [2022-02-20 18:11:02,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-20 18:11:02,245 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:02,245 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:02,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 262 transitions. [2022-02-20 18:11:02,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 262 transitions. [2022-02-20 18:11:02,250 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 262 transitions. [2022-02-20 18:11:02,412 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:02,433 INFO L225 Difference]: With dead ends: 1033 [2022-02-20 18:11:02,433 INFO L226 Difference]: Without dead ends: 572 [2022-02-20 18:11:02,435 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=41, Invalid=115, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:11:02,441 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 179 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 289 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 179 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 289 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:02,441 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [179 Valid, 373 Invalid, 344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 289 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:02,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 572 states. [2022-02-20 18:11:02,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 572 to 512. [2022-02-20 18:11:02,470 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:02,471 INFO L82 GeneralOperation]: Start isEquivalent. First operand 572 states. Second operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) [2022-02-20 18:11:02,472 INFO L74 IsIncluded]: Start isIncluded. First operand 572 states. Second operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) [2022-02-20 18:11:02,473 INFO L87 Difference]: Start difference. First operand 572 states. Second operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) [2022-02-20 18:11:02,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,489 INFO L93 Difference]: Finished difference Result 572 states and 740 transitions. [2022-02-20 18:11:02,489 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 740 transitions. [2022-02-20 18:11:02,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:02,491 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:02,492 INFO L74 IsIncluded]: Start isIncluded. First operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) Second operand 572 states. [2022-02-20 18:11:02,493 INFO L87 Difference]: Start difference. First operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) Second operand 572 states. [2022-02-20 18:11:02,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:02,508 INFO L93 Difference]: Finished difference Result 572 states and 740 transitions. [2022-02-20 18:11:02,508 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 740 transitions. [2022-02-20 18:11:02,510 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:02,510 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:02,510 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:02,510 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:02,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 512 states, 401 states have (on average 1.2668329177057356) internal successors, (508), 435 states have internal predecessors, (508), 53 states have call successors, (53), 45 states have call predecessors, (53), 57 states have return successors, (96), 49 states have call predecessors, (96), 53 states have call successors, (96) [2022-02-20 18:11:02,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 512 states to 512 states and 657 transitions. [2022-02-20 18:11:02,526 INFO L78 Accepts]: Start accepts. Automaton has 512 states and 657 transitions. Word has length 42 [2022-02-20 18:11:02,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:02,526 INFO L470 AbstractCegarLoop]: Abstraction has 512 states and 657 transitions. [2022-02-20 18:11:02,527 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.625) internal successors, (37), 6 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,527 INFO L276 IsEmpty]: Start isEmpty. Operand 512 states and 657 transitions. [2022-02-20 18:11:02,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-02-20 18:11:02,527 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:02,527 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:02,527 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:11:02,528 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:02,528 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:02,528 INFO L85 PathProgramCache]: Analyzing trace with hash 1730867423, now seen corresponding path program 1 times [2022-02-20 18:11:02,528 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:02,528 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630090098] [2022-02-20 18:11:02,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:02,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:02,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:02,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,558 INFO L290 TraceCheckUtils]: 0: Hoare triple {11807#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11791#true} is VALID [2022-02-20 18:11:02,558 INFO L290 TraceCheckUtils]: 1: Hoare triple {11791#true} assume true; {11791#true} is VALID [2022-02-20 18:11:02,558 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11791#true} {11791#true} #245#return; {11791#true} is VALID [2022-02-20 18:11:02,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:02,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:02,581 INFO L290 TraceCheckUtils]: 0: Hoare triple {11808#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {11791#true} is VALID [2022-02-20 18:11:02,581 INFO L290 TraceCheckUtils]: 1: Hoare triple {11791#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {11791#true} is VALID [2022-02-20 18:11:02,581 INFO L290 TraceCheckUtils]: 2: Hoare triple {11791#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~3#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {11791#true} is VALID [2022-02-20 18:11:02,581 INFO L290 TraceCheckUtils]: 3: Hoare triple {11791#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {11791#true} is VALID [2022-02-20 18:11:02,581 INFO L290 TraceCheckUtils]: 4: Hoare triple {11791#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {11809#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:02,582 INFO L290 TraceCheckUtils]: 5: Hoare triple {11809#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {11810#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:02,582 INFO L290 TraceCheckUtils]: 6: Hoare triple {11810#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {11811#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:11:02,582 INFO L290 TraceCheckUtils]: 7: Hoare triple {11811#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11792#false} is VALID [2022-02-20 18:11:02,582 INFO L290 TraceCheckUtils]: 8: Hoare triple {11792#false} assume { :end_inline_activatePump } true; {11792#false} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 9: Hoare triple {11792#false} assume true; {11792#false} is VALID [2022-02-20 18:11:02,583 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {11792#false} {11791#true} #239#return; {11792#false} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 0: Hoare triple {11791#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 1: Hoare triple {11791#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 2: Hoare triple {11791#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 3: Hoare triple {11791#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 4: Hoare triple {11791#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 5: Hoare triple {11791#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 6: Hoare triple {11791#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 7: Hoare triple {11791#true} assume !false; {11791#true} is VALID [2022-02-20 18:11:02,583 INFO L290 TraceCheckUtils]: 8: Hoare triple {11791#true} assume test_~splverifierCounter~0#1 < 4; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 9: Hoare triple {11791#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 10: Hoare triple {11791#true} assume 0 != test_~tmp~6#1; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L272 TraceCheckUtils]: 11: Hoare triple {11791#true} call waterRise(); {11807#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 12: Hoare triple {11807#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 13: Hoare triple {11791#true} assume true; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {11791#true} {11791#true} #245#return; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 15: Hoare triple {11791#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {11791#true} is VALID [2022-02-20 18:11:02,584 INFO L290 TraceCheckUtils]: 16: Hoare triple {11791#true} assume !(0 != test_~tmp___0~3#1); {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 17: Hoare triple {11791#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 18: Hoare triple {11791#true} assume 0 != test_~tmp___2~0#1; {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L272 TraceCheckUtils]: 19: Hoare triple {11791#true} call timeShift(); {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 20: Hoare triple {11791#true} assume !(0 != ~pumpRunning~0); {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 21: Hoare triple {11791#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 22: Hoare triple {11791#true} assume !(0 != ~pumpRunning~0); {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L272 TraceCheckUtils]: 23: Hoare triple {11791#true} call processEnvironment__wrappee__highWaterSensor(); {11808#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 24: Hoare triple {11808#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 25: Hoare triple {11791#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {11791#true} is VALID [2022-02-20 18:11:02,585 INFO L290 TraceCheckUtils]: 26: Hoare triple {11791#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~3#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {11791#true} is VALID [2022-02-20 18:11:02,586 INFO L290 TraceCheckUtils]: 27: Hoare triple {11791#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {11791#true} is VALID [2022-02-20 18:11:02,586 INFO L290 TraceCheckUtils]: 28: Hoare triple {11791#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {11809#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:02,586 INFO L290 TraceCheckUtils]: 29: Hoare triple {11809#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {11810#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:02,586 INFO L290 TraceCheckUtils]: 30: Hoare triple {11810#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {11811#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:11:02,587 INFO L290 TraceCheckUtils]: 31: Hoare triple {11811#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 32: Hoare triple {11792#false} assume { :end_inline_activatePump } true; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 33: Hoare triple {11792#false} assume true; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {11792#false} {11791#true} #239#return; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 35: Hoare triple {11792#false} assume { :end_inline_processEnvironment } true; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 36: Hoare triple {11792#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 37: Hoare triple {11792#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {11792#false} is VALID [2022-02-20 18:11:02,589 INFO L290 TraceCheckUtils]: 38: Hoare triple {11792#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {11792#false} is VALID [2022-02-20 18:11:02,590 INFO L290 TraceCheckUtils]: 39: Hoare triple {11792#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {11792#false} is VALID [2022-02-20 18:11:02,590 INFO L290 TraceCheckUtils]: 40: Hoare triple {11792#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {11792#false} is VALID [2022-02-20 18:11:02,590 INFO L290 TraceCheckUtils]: 41: Hoare triple {11792#false} assume !false; {11792#false} is VALID [2022-02-20 18:11:02,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:02,591 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:02,591 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630090098] [2022-02-20 18:11:02,591 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630090098] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:02,591 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:02,591 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:02,591 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1391256330] [2022-02-20 18:11:02,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:02,592 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:02,592 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:02,592 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:02,614 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:02,614 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:02,614 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:02,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:02,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:02,615 INFO L87 Difference]: Start difference. First operand 512 states and 657 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:03,140 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,140 INFO L93 Difference]: Finished difference Result 1010 states and 1309 transitions. [2022-02-20 18:11:03,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:11:03,140 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:03,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:03,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:03,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 256 transitions. [2022-02-20 18:11:03,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:03,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 256 transitions. [2022-02-20 18:11:03,146 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 256 transitions. [2022-02-20 18:11:03,304 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:03,319 INFO L225 Difference]: With dead ends: 1010 [2022-02-20 18:11:03,320 INFO L226 Difference]: Without dead ends: 505 [2022-02-20 18:11:03,321 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:03,322 INFO L933 BasicCegarLoop]: 77 mSDtfsCounter, 140 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 209 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 209 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:03,322 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [140 Valid, 313 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 209 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:11:03,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 505 states. [2022-02-20 18:11:03,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 505 to 415. [2022-02-20 18:11:03,365 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:03,369 INFO L82 GeneralOperation]: Start isEquivalent. First operand 505 states. Second operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) [2022-02-20 18:11:03,371 INFO L74 IsIncluded]: Start isIncluded. First operand 505 states. Second operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) [2022-02-20 18:11:03,372 INFO L87 Difference]: Start difference. First operand 505 states. Second operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) [2022-02-20 18:11:03,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,384 INFO L93 Difference]: Finished difference Result 505 states and 635 transitions. [2022-02-20 18:11:03,384 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 635 transitions. [2022-02-20 18:11:03,385 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:03,386 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:03,388 INFO L74 IsIncluded]: Start isIncluded. First operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) Second operand 505 states. [2022-02-20 18:11:03,388 INFO L87 Difference]: Start difference. First operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) Second operand 505 states. [2022-02-20 18:11:03,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:03,401 INFO L93 Difference]: Finished difference Result 505 states and 635 transitions. [2022-02-20 18:11:03,401 INFO L276 IsEmpty]: Start isEmpty. Operand 505 states and 635 transitions. [2022-02-20 18:11:03,402 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:03,402 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:03,402 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:03,402 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:03,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 415 states, 326 states have (on average 1.2638036809815951) internal successors, (412), 353 states have internal predecessors, (412), 44 states have call successors, (44), 38 states have call predecessors, (44), 44 states have return successors, (70), 38 states have call predecessors, (70), 44 states have call successors, (70) [2022-02-20 18:11:03,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 415 states to 415 states and 526 transitions. [2022-02-20 18:11:03,414 INFO L78 Accepts]: Start accepts. Automaton has 415 states and 526 transitions. Word has length 42 [2022-02-20 18:11:03,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:03,414 INFO L470 AbstractCegarLoop]: Abstraction has 415 states and 526 transitions. [2022-02-20 18:11:03,415 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:03,415 INFO L276 IsEmpty]: Start isEmpty. Operand 415 states and 526 transitions. [2022-02-20 18:11:03,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-02-20 18:11:03,416 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:03,416 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:03,416 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:11:03,416 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:03,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:03,417 INFO L85 PathProgramCache]: Analyzing trace with hash -301318181, now seen corresponding path program 1 times [2022-02-20 18:11:03,417 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:03,417 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576340564] [2022-02-20 18:11:03,417 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:03,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:03,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:03,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,478 INFO L290 TraceCheckUtils]: 0: Hoare triple {14846#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14827#true} is VALID [2022-02-20 18:11:03,478 INFO L290 TraceCheckUtils]: 1: Hoare triple {14827#true} assume true; {14827#true} is VALID [2022-02-20 18:11:03,478 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {14827#true} {14827#true} #245#return; {14827#true} is VALID [2022-02-20 18:11:03,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:03,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:03,492 INFO L290 TraceCheckUtils]: 0: Hoare triple {14847#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {14827#true} is VALID [2022-02-20 18:11:03,492 INFO L290 TraceCheckUtils]: 1: Hoare triple {14827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {14827#true} is VALID [2022-02-20 18:11:03,493 INFO L290 TraceCheckUtils]: 2: Hoare triple {14827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,493 INFO L290 TraceCheckUtils]: 3: Hoare triple {14843#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,494 INFO L290 TraceCheckUtils]: 4: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,494 INFO L290 TraceCheckUtils]: 5: Hoare triple {14843#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,494 INFO L290 TraceCheckUtils]: 6: Hoare triple {14843#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,494 INFO L290 TraceCheckUtils]: 7: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,495 INFO L290 TraceCheckUtils]: 8: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,495 INFO L290 TraceCheckUtils]: 9: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume true; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,495 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {14843#(<= 2 ~waterLevel~0)} {14827#true} #239#return; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {14827#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {14827#true} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 1: Hoare triple {14827#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {14827#true} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 2: Hoare triple {14827#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {14827#true} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 3: Hoare triple {14827#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {14827#true} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 4: Hoare triple {14827#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {14827#true} is VALID [2022-02-20 18:11:03,496 INFO L290 TraceCheckUtils]: 5: Hoare triple {14827#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L290 TraceCheckUtils]: 6: Hoare triple {14827#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L290 TraceCheckUtils]: 7: Hoare triple {14827#true} assume !false; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L290 TraceCheckUtils]: 8: Hoare triple {14827#true} assume test_~splverifierCounter~0#1 < 4; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L290 TraceCheckUtils]: 9: Hoare triple {14827#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L290 TraceCheckUtils]: 10: Hoare triple {14827#true} assume 0 != test_~tmp~6#1; {14827#true} is VALID [2022-02-20 18:11:03,497 INFO L272 TraceCheckUtils]: 11: Hoare triple {14827#true} call waterRise(); {14846#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 12: Hoare triple {14846#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 13: Hoare triple {14827#true} assume true; {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {14827#true} {14827#true} #245#return; {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 15: Hoare triple {14827#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 16: Hoare triple {14827#true} assume !(0 != test_~tmp___0~3#1); {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 17: Hoare triple {14827#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {14827#true} is VALID [2022-02-20 18:11:03,498 INFO L290 TraceCheckUtils]: 18: Hoare triple {14827#true} assume 0 != test_~tmp___2~0#1; {14827#true} is VALID [2022-02-20 18:11:03,499 INFO L272 TraceCheckUtils]: 19: Hoare triple {14827#true} call timeShift(); {14827#true} is VALID [2022-02-20 18:11:03,499 INFO L290 TraceCheckUtils]: 20: Hoare triple {14827#true} assume !(0 != ~pumpRunning~0); {14827#true} is VALID [2022-02-20 18:11:03,499 INFO L290 TraceCheckUtils]: 21: Hoare triple {14827#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {14827#true} is VALID [2022-02-20 18:11:03,499 INFO L290 TraceCheckUtils]: 22: Hoare triple {14827#true} assume !(0 != ~pumpRunning~0); {14827#true} is VALID [2022-02-20 18:11:03,499 INFO L272 TraceCheckUtils]: 23: Hoare triple {14827#true} call processEnvironment__wrappee__highWaterSensor(); {14847#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:03,500 INFO L290 TraceCheckUtils]: 24: Hoare triple {14847#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {14827#true} is VALID [2022-02-20 18:11:03,500 INFO L290 TraceCheckUtils]: 25: Hoare triple {14827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {14827#true} is VALID [2022-02-20 18:11:03,500 INFO L290 TraceCheckUtils]: 26: Hoare triple {14827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,501 INFO L290 TraceCheckUtils]: 27: Hoare triple {14843#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,501 INFO L290 TraceCheckUtils]: 28: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,501 INFO L290 TraceCheckUtils]: 29: Hoare triple {14843#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,502 INFO L290 TraceCheckUtils]: 30: Hoare triple {14843#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,502 INFO L290 TraceCheckUtils]: 31: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,502 INFO L290 TraceCheckUtils]: 32: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,503 INFO L290 TraceCheckUtils]: 33: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume true; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,503 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {14843#(<= 2 ~waterLevel~0)} {14827#true} #239#return; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,503 INFO L290 TraceCheckUtils]: 35: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {14843#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:03,504 INFO L290 TraceCheckUtils]: 36: Hoare triple {14843#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {14844#(<= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:03,504 INFO L290 TraceCheckUtils]: 37: Hoare triple {14844#(<= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {14845#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:03,504 INFO L290 TraceCheckUtils]: 38: Hoare triple {14845#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {14828#false} is VALID [2022-02-20 18:11:03,504 INFO L290 TraceCheckUtils]: 39: Hoare triple {14828#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {14828#false} is VALID [2022-02-20 18:11:03,505 INFO L290 TraceCheckUtils]: 40: Hoare triple {14828#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {14828#false} is VALID [2022-02-20 18:11:03,505 INFO L290 TraceCheckUtils]: 41: Hoare triple {14828#false} assume !false; {14828#false} is VALID [2022-02-20 18:11:03,505 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:03,505 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:03,505 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576340564] [2022-02-20 18:11:03,505 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576340564] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:03,505 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:03,506 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:03,506 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [190569888] [2022-02-20 18:11:03,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:03,506 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:03,506 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:03,507 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:03,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:03,530 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:03,530 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:03,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:03,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:03,530 INFO L87 Difference]: Start difference. First operand 415 states and 526 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:04,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:04,425 INFO L93 Difference]: Finished difference Result 951 states and 1280 transitions. [2022-02-20 18:11:04,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-02-20 18:11:04,425 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-02-20 18:11:04,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:04,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:04,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 333 transitions. [2022-02-20 18:11:04,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:04,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 333 transitions. [2022-02-20 18:11:04,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 17 states and 333 transitions. [2022-02-20 18:11:04,640 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 333 edges. 333 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:04,664 INFO L225 Difference]: With dead ends: 951 [2022-02-20 18:11:04,665 INFO L226 Difference]: Without dead ends: 650 [2022-02-20 18:11:04,666 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:04,667 INFO L933 BasicCegarLoop]: 133 mSDtfsCounter, 184 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 320 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 320 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:04,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [186 Valid, 483 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 320 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:04,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2022-02-20 18:11:04,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 625. [2022-02-20 18:11:04,742 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:04,743 INFO L82 GeneralOperation]: Start isEquivalent. First operand 650 states. Second operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) [2022-02-20 18:11:04,744 INFO L74 IsIncluded]: Start isIncluded. First operand 650 states. Second operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) [2022-02-20 18:11:04,745 INFO L87 Difference]: Start difference. First operand 650 states. Second operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) [2022-02-20 18:11:04,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:04,762 INFO L93 Difference]: Finished difference Result 650 states and 834 transitions. [2022-02-20 18:11:04,762 INFO L276 IsEmpty]: Start isEmpty. Operand 650 states and 834 transitions. [2022-02-20 18:11:04,764 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:04,764 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:04,776 INFO L74 IsIncluded]: Start isIncluded. First operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) Second operand 650 states. [2022-02-20 18:11:04,778 INFO L87 Difference]: Start difference. First operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) Second operand 650 states. [2022-02-20 18:11:04,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:04,795 INFO L93 Difference]: Finished difference Result 650 states and 834 transitions. [2022-02-20 18:11:04,795 INFO L276 IsEmpty]: Start isEmpty. Operand 650 states and 834 transitions. [2022-02-20 18:11:04,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:04,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:04,797 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:04,797 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:04,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 625 states, 491 states have (on average 1.2382892057026476) internal successors, (608), 526 states have internal predecessors, (608), 66 states have call successors, (66), 58 states have call predecessors, (66), 67 states have return successors, (131), 66 states have call predecessors, (131), 66 states have call successors, (131) [2022-02-20 18:11:04,818 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 625 states to 625 states and 805 transitions. [2022-02-20 18:11:04,819 INFO L78 Accepts]: Start accepts. Automaton has 625 states and 805 transitions. Word has length 42 [2022-02-20 18:11:04,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:04,819 INFO L470 AbstractCegarLoop]: Abstraction has 625 states and 805 transitions. [2022-02-20 18:11:04,820 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:04,820 INFO L276 IsEmpty]: Start isEmpty. Operand 625 states and 805 transitions. [2022-02-20 18:11:04,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2022-02-20 18:11:04,821 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:04,822 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:04,822 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:11:04,822 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:04,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:04,822 INFO L85 PathProgramCache]: Analyzing trace with hash -547601245, now seen corresponding path program 1 times [2022-02-20 18:11:04,823 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:04,823 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [671257677] [2022-02-20 18:11:04,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:04,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:04,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:04,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,901 INFO L290 TraceCheckUtils]: 0: Hoare triple {18417#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18379#true} is VALID [2022-02-20 18:11:04,901 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,901 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18379#true} {18379#true} #245#return; {18379#true} is VALID [2022-02-20 18:11:04,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:04,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:04,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,936 INFO L290 TraceCheckUtils]: 0: Hoare triple {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:04,937 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {18379#true} is VALID [2022-02-20 18:11:04,937 INFO L290 TraceCheckUtils]: 2: Hoare triple {18379#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,937 INFO L290 TraceCheckUtils]: 3: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,938 INFO L290 TraceCheckUtils]: 4: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,938 INFO L290 TraceCheckUtils]: 5: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,938 INFO L290 TraceCheckUtils]: 6: Hoare triple {18406#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,938 INFO L290 TraceCheckUtils]: 7: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,939 INFO L290 TraceCheckUtils]: 8: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,939 INFO L290 TraceCheckUtils]: 9: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,939 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #239#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,940 INFO L290 TraceCheckUtils]: 0: Hoare triple {18418#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,940 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18379#true} is VALID [2022-02-20 18:11:04,940 INFO L290 TraceCheckUtils]: 2: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,940 INFO L272 TraceCheckUtils]: 3: Hoare triple {18379#true} call processEnvironment__wrappee__highWaterSensor(); {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:04,940 INFO L290 TraceCheckUtils]: 4: Hoare triple {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:04,941 INFO L290 TraceCheckUtils]: 5: Hoare triple {18379#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {18379#true} is VALID [2022-02-20 18:11:04,941 INFO L290 TraceCheckUtils]: 6: Hoare triple {18379#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,941 INFO L290 TraceCheckUtils]: 7: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,942 INFO L290 TraceCheckUtils]: 8: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,942 INFO L290 TraceCheckUtils]: 9: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,942 INFO L290 TraceCheckUtils]: 10: Hoare triple {18406#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,942 INFO L290 TraceCheckUtils]: 11: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,943 INFO L290 TraceCheckUtils]: 12: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,943 INFO L290 TraceCheckUtils]: 13: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,943 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #239#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,944 INFO L290 TraceCheckUtils]: 15: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,944 INFO L290 TraceCheckUtils]: 16: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,944 INFO L290 TraceCheckUtils]: 17: Hoare triple {18406#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,945 INFO L290 TraceCheckUtils]: 18: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,945 INFO L290 TraceCheckUtils]: 19: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,945 INFO L290 TraceCheckUtils]: 20: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,946 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #251#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-02-20 18:11:04,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:04,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:04,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,961 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {18379#true} {18379#true} #257#return; {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L290 TraceCheckUtils]: 0: Hoare triple {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume !(0 == ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L272 TraceCheckUtils]: 2: Hoare triple {18379#true} call processEnvironment__wrappee__base(); {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L290 TraceCheckUtils]: 3: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {18379#true} {18379#true} #257#return; {18379#true} is VALID [2022-02-20 18:11:04,962 INFO L290 TraceCheckUtils]: 5: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,963 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {18379#true} {18407#(<= 1 ~waterLevel~0)} #237#return; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,963 INFO L290 TraceCheckUtils]: 0: Hoare triple {18379#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {18379#true} is VALID [2022-02-20 18:11:04,963 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {18379#true} is VALID [2022-02-20 18:11:04,963 INFO L290 TraceCheckUtils]: 2: Hoare triple {18379#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {18379#true} is VALID [2022-02-20 18:11:04,963 INFO L290 TraceCheckUtils]: 3: Hoare triple {18379#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18379#true} is VALID [2022-02-20 18:11:04,963 INFO L290 TraceCheckUtils]: 4: Hoare triple {18379#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 5: Hoare triple {18379#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 6: Hoare triple {18379#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 7: Hoare triple {18379#true} assume !false; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 8: Hoare triple {18379#true} assume test_~splverifierCounter~0#1 < 4; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 9: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18379#true} is VALID [2022-02-20 18:11:04,964 INFO L290 TraceCheckUtils]: 10: Hoare triple {18379#true} assume 0 != test_~tmp~6#1; {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L272 TraceCheckUtils]: 11: Hoare triple {18379#true} call waterRise(); {18417#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:04,966 INFO L290 TraceCheckUtils]: 12: Hoare triple {18417#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L290 TraceCheckUtils]: 13: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18379#true} {18379#true} #245#return; {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L290 TraceCheckUtils]: 15: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L290 TraceCheckUtils]: 16: Hoare triple {18379#true} assume !(0 != test_~tmp___0~3#1); {18379#true} is VALID [2022-02-20 18:11:04,966 INFO L290 TraceCheckUtils]: 17: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18379#true} is VALID [2022-02-20 18:11:04,967 INFO L290 TraceCheckUtils]: 18: Hoare triple {18379#true} assume 0 != test_~tmp___2~0#1; {18379#true} is VALID [2022-02-20 18:11:04,967 INFO L272 TraceCheckUtils]: 19: Hoare triple {18379#true} call timeShift(); {18418#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:04,967 INFO L290 TraceCheckUtils]: 20: Hoare triple {18418#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,968 INFO L290 TraceCheckUtils]: 21: Hoare triple {18379#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18379#true} is VALID [2022-02-20 18:11:04,968 INFO L290 TraceCheckUtils]: 22: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,968 INFO L272 TraceCheckUtils]: 23: Hoare triple {18379#true} call processEnvironment__wrappee__highWaterSensor(); {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:04,968 INFO L290 TraceCheckUtils]: 24: Hoare triple {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:04,968 INFO L290 TraceCheckUtils]: 25: Hoare triple {18379#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {18379#true} is VALID [2022-02-20 18:11:04,969 INFO L290 TraceCheckUtils]: 26: Hoare triple {18379#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,969 INFO L290 TraceCheckUtils]: 27: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,969 INFO L290 TraceCheckUtils]: 28: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,969 INFO L290 TraceCheckUtils]: 29: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,970 INFO L290 TraceCheckUtils]: 30: Hoare triple {18406#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,970 INFO L290 TraceCheckUtils]: 31: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,970 INFO L290 TraceCheckUtils]: 32: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,971 INFO L290 TraceCheckUtils]: 33: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,971 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #239#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,971 INFO L290 TraceCheckUtils]: 35: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,974 INFO L290 TraceCheckUtils]: 36: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,974 INFO L290 TraceCheckUtils]: 37: Hoare triple {18406#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,974 INFO L290 TraceCheckUtils]: 38: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,975 INFO L290 TraceCheckUtils]: 39: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,975 INFO L290 TraceCheckUtils]: 40: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,975 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #251#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,976 INFO L290 TraceCheckUtils]: 42: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !false; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,976 INFO L290 TraceCheckUtils]: 43: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,976 INFO L290 TraceCheckUtils]: 44: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,976 INFO L290 TraceCheckUtils]: 45: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,977 INFO L290 TraceCheckUtils]: 46: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,977 INFO L290 TraceCheckUtils]: 47: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,977 INFO L290 TraceCheckUtils]: 48: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,977 INFO L290 TraceCheckUtils]: 49: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,978 INFO L272 TraceCheckUtils]: 50: Hoare triple {18406#(<= 2 ~waterLevel~0)} call timeShift(); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,978 INFO L290 TraceCheckUtils]: 51: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,979 INFO L290 TraceCheckUtils]: 52: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,979 INFO L290 TraceCheckUtils]: 53: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,979 INFO L290 TraceCheckUtils]: 54: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,980 INFO L290 TraceCheckUtils]: 55: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,980 INFO L290 TraceCheckUtils]: 56: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,980 INFO L290 TraceCheckUtils]: 57: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,981 INFO L290 TraceCheckUtils]: 58: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,981 INFO L290 TraceCheckUtils]: 59: Hoare triple {18407#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,981 INFO L290 TraceCheckUtils]: 60: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3#1); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,982 INFO L272 TraceCheckUtils]: 61: Hoare triple {18407#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:04,982 INFO L290 TraceCheckUtils]: 62: Hoare triple {18430#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:04,982 INFO L290 TraceCheckUtils]: 63: Hoare triple {18379#true} assume !(0 == ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:04,982 INFO L272 TraceCheckUtils]: 64: Hoare triple {18379#true} call processEnvironment__wrappee__base(); {18379#true} is VALID [2022-02-20 18:11:04,982 INFO L290 TraceCheckUtils]: 65: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,982 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {18379#true} {18379#true} #257#return; {18379#true} is VALID [2022-02-20 18:11:04,983 INFO L290 TraceCheckUtils]: 67: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:04,983 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {18379#true} {18407#(<= 1 ~waterLevel~0)} #237#return; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,983 INFO L290 TraceCheckUtils]: 69: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:04,984 INFO L290 TraceCheckUtils]: 70: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:04,984 INFO L290 TraceCheckUtils]: 71: Hoare triple {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:04,984 INFO L290 TraceCheckUtils]: 72: Hoare triple {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {18380#false} is VALID [2022-02-20 18:11:04,984 INFO L290 TraceCheckUtils]: 73: Hoare triple {18380#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {18380#false} is VALID [2022-02-20 18:11:04,985 INFO L290 TraceCheckUtils]: 74: Hoare triple {18380#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {18380#false} is VALID [2022-02-20 18:11:04,985 INFO L290 TraceCheckUtils]: 75: Hoare triple {18380#false} assume !false; {18380#false} is VALID [2022-02-20 18:11:04,985 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 11 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-02-20 18:11:04,985 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:04,985 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [671257677] [2022-02-20 18:11:04,986 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [671257677] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:04,986 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [896740353] [2022-02-20 18:11:04,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:04,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:04,986 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:04,987 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:04,995 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:11:05,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:05,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 419 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:11:05,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:05,112 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:05,456 INFO L290 TraceCheckUtils]: 0: Hoare triple {18379#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 2: Hoare triple {18379#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 3: Hoare triple {18379#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 4: Hoare triple {18379#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 5: Hoare triple {18379#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 6: Hoare triple {18379#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18379#true} is VALID [2022-02-20 18:11:05,457 INFO L290 TraceCheckUtils]: 7: Hoare triple {18379#true} assume !false; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L290 TraceCheckUtils]: 8: Hoare triple {18379#true} assume test_~splverifierCounter~0#1 < 4; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L290 TraceCheckUtils]: 9: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L290 TraceCheckUtils]: 10: Hoare triple {18379#true} assume 0 != test_~tmp~6#1; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L272 TraceCheckUtils]: 11: Hoare triple {18379#true} call waterRise(); {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L290 TraceCheckUtils]: 12: Hoare triple {18379#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L290 TraceCheckUtils]: 13: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:05,458 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18379#true} {18379#true} #245#return; {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 15: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 16: Hoare triple {18379#true} assume !(0 != test_~tmp___0~3#1); {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 17: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 18: Hoare triple {18379#true} assume 0 != test_~tmp___2~0#1; {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L272 TraceCheckUtils]: 19: Hoare triple {18379#true} call timeShift(); {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 20: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:05,459 INFO L290 TraceCheckUtils]: 21: Hoare triple {18379#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18379#true} is VALID [2022-02-20 18:11:05,460 INFO L290 TraceCheckUtils]: 22: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:05,460 INFO L272 TraceCheckUtils]: 23: Hoare triple {18379#true} call processEnvironment__wrappee__highWaterSensor(); {18379#true} is VALID [2022-02-20 18:11:05,460 INFO L290 TraceCheckUtils]: 24: Hoare triple {18379#true} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:05,460 INFO L290 TraceCheckUtils]: 25: Hoare triple {18379#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {18379#true} is VALID [2022-02-20 18:11:05,460 INFO L290 TraceCheckUtils]: 26: Hoare triple {18379#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,461 INFO L290 TraceCheckUtils]: 27: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,461 INFO L290 TraceCheckUtils]: 28: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,461 INFO L290 TraceCheckUtils]: 29: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,462 INFO L290 TraceCheckUtils]: 30: Hoare triple {18406#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,462 INFO L290 TraceCheckUtils]: 31: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,462 INFO L290 TraceCheckUtils]: 32: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,463 INFO L290 TraceCheckUtils]: 33: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,463 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #239#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,463 INFO L290 TraceCheckUtils]: 35: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,464 INFO L290 TraceCheckUtils]: 36: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,464 INFO L290 TraceCheckUtils]: 37: Hoare triple {18406#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,464 INFO L290 TraceCheckUtils]: 38: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,464 INFO L290 TraceCheckUtils]: 39: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,465 INFO L290 TraceCheckUtils]: 40: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,465 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #251#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,465 INFO L290 TraceCheckUtils]: 42: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !false; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,466 INFO L290 TraceCheckUtils]: 43: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,466 INFO L290 TraceCheckUtils]: 44: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,466 INFO L290 TraceCheckUtils]: 45: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,466 INFO L290 TraceCheckUtils]: 46: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,467 INFO L290 TraceCheckUtils]: 47: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,467 INFO L290 TraceCheckUtils]: 48: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,467 INFO L290 TraceCheckUtils]: 49: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,468 INFO L272 TraceCheckUtils]: 50: Hoare triple {18406#(<= 2 ~waterLevel~0)} call timeShift(); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,468 INFO L290 TraceCheckUtils]: 51: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,468 INFO L290 TraceCheckUtils]: 52: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,469 INFO L290 TraceCheckUtils]: 53: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,469 INFO L290 TraceCheckUtils]: 54: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,469 INFO L290 TraceCheckUtils]: 55: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,470 INFO L290 TraceCheckUtils]: 56: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,470 INFO L290 TraceCheckUtils]: 57: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,472 INFO L290 TraceCheckUtils]: 58: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,472 INFO L290 TraceCheckUtils]: 59: Hoare triple {18407#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,473 INFO L290 TraceCheckUtils]: 60: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3#1); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,473 INFO L272 TraceCheckUtils]: 61: Hoare triple {18407#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,474 INFO L290 TraceCheckUtils]: 62: Hoare triple {18407#(<= 1 ~waterLevel~0)} havoc ~tmp~2#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,476 INFO L290 TraceCheckUtils]: 63: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,477 INFO L272 TraceCheckUtils]: 64: Hoare triple {18407#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__base(); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,478 INFO L290 TraceCheckUtils]: 65: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,478 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {18407#(<= 1 ~waterLevel~0)} {18407#(<= 1 ~waterLevel~0)} #257#return; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,479 INFO L290 TraceCheckUtils]: 67: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,479 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {18407#(<= 1 ~waterLevel~0)} {18407#(<= 1 ~waterLevel~0)} #237#return; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,479 INFO L290 TraceCheckUtils]: 69: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,480 INFO L290 TraceCheckUtils]: 70: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:05,480 INFO L290 TraceCheckUtils]: 71: Hoare triple {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:05,480 INFO L290 TraceCheckUtils]: 72: Hoare triple {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {18380#false} is VALID [2022-02-20 18:11:05,480 INFO L290 TraceCheckUtils]: 73: Hoare triple {18380#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {18380#false} is VALID [2022-02-20 18:11:05,481 INFO L290 TraceCheckUtils]: 74: Hoare triple {18380#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {18380#false} is VALID [2022-02-20 18:11:05,481 INFO L290 TraceCheckUtils]: 75: Hoare triple {18380#false} assume !false; {18380#false} is VALID [2022-02-20 18:11:05,481 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 14 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:05,481 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:11:05,740 INFO L290 TraceCheckUtils]: 75: Hoare triple {18380#false} assume !false; {18380#false} is VALID [2022-02-20 18:11:05,740 INFO L290 TraceCheckUtils]: 74: Hoare triple {18380#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {18380#false} is VALID [2022-02-20 18:11:05,740 INFO L290 TraceCheckUtils]: 73: Hoare triple {18380#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {18380#false} is VALID [2022-02-20 18:11:05,741 INFO L290 TraceCheckUtils]: 72: Hoare triple {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {18380#false} is VALID [2022-02-20 18:11:05,741 INFO L290 TraceCheckUtils]: 71: Hoare triple {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18416#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:05,742 INFO L290 TraceCheckUtils]: 70: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18415#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:05,742 INFO L290 TraceCheckUtils]: 69: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,742 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {18379#true} {18407#(<= 1 ~waterLevel~0)} #237#return; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,742 INFO L290 TraceCheckUtils]: 67: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:05,742 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {18379#true} {18379#true} #257#return; {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L290 TraceCheckUtils]: 65: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L272 TraceCheckUtils]: 64: Hoare triple {18379#true} call processEnvironment__wrappee__base(); {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L290 TraceCheckUtils]: 63: Hoare triple {18379#true} assume !(0 == ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L290 TraceCheckUtils]: 62: Hoare triple {18379#true} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L272 TraceCheckUtils]: 61: Hoare triple {18407#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {18379#true} is VALID [2022-02-20 18:11:05,743 INFO L290 TraceCheckUtils]: 60: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3#1); {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,744 INFO L290 TraceCheckUtils]: 59: Hoare triple {18407#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,744 INFO L290 TraceCheckUtils]: 58: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,744 INFO L290 TraceCheckUtils]: 57: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,744 INFO L290 TraceCheckUtils]: 56: Hoare triple {18407#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,745 INFO L290 TraceCheckUtils]: 55: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,745 INFO L290 TraceCheckUtils]: 54: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,745 INFO L290 TraceCheckUtils]: 53: Hoare triple {18407#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,746 INFO L290 TraceCheckUtils]: 52: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18407#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,746 INFO L290 TraceCheckUtils]: 51: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,746 INFO L272 TraceCheckUtils]: 50: Hoare triple {18406#(<= 2 ~waterLevel~0)} call timeShift(); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,746 INFO L290 TraceCheckUtils]: 49: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,747 INFO L290 TraceCheckUtils]: 48: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,747 INFO L290 TraceCheckUtils]: 47: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,747 INFO L290 TraceCheckUtils]: 46: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,748 INFO L290 TraceCheckUtils]: 45: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,748 INFO L290 TraceCheckUtils]: 44: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,748 INFO L290 TraceCheckUtils]: 43: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,748 INFO L290 TraceCheckUtils]: 42: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !false; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,749 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #251#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,749 INFO L290 TraceCheckUtils]: 40: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,749 INFO L290 TraceCheckUtils]: 39: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,749 INFO L290 TraceCheckUtils]: 38: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,750 INFO L290 TraceCheckUtils]: 37: Hoare triple {18406#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,750 INFO L290 TraceCheckUtils]: 36: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,750 INFO L290 TraceCheckUtils]: 35: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,751 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {18406#(<= 2 ~waterLevel~0)} {18379#true} #239#return; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,751 INFO L290 TraceCheckUtils]: 33: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,751 INFO L290 TraceCheckUtils]: 32: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,752 INFO L290 TraceCheckUtils]: 31: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,752 INFO L290 TraceCheckUtils]: 30: Hoare triple {18406#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,752 INFO L290 TraceCheckUtils]: 29: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,752 INFO L290 TraceCheckUtils]: 28: Hoare triple {18406#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,753 INFO L290 TraceCheckUtils]: 27: Hoare triple {18406#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,753 INFO L290 TraceCheckUtils]: 26: Hoare triple {18379#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {18406#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:05,753 INFO L290 TraceCheckUtils]: 25: Hoare triple {18379#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {18379#true} is VALID [2022-02-20 18:11:05,753 INFO L290 TraceCheckUtils]: 24: Hoare triple {18379#true} havoc ~tmp~2#1; {18379#true} is VALID [2022-02-20 18:11:05,753 INFO L272 TraceCheckUtils]: 23: Hoare triple {18379#true} call processEnvironment__wrappee__highWaterSensor(); {18379#true} is VALID [2022-02-20 18:11:05,753 INFO L290 TraceCheckUtils]: 22: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 21: Hoare triple {18379#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 20: Hoare triple {18379#true} assume !(0 != ~pumpRunning~0); {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L272 TraceCheckUtils]: 19: Hoare triple {18379#true} call timeShift(); {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 18: Hoare triple {18379#true} assume 0 != test_~tmp___2~0#1; {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 17: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 16: Hoare triple {18379#true} assume !(0 != test_~tmp___0~3#1); {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L290 TraceCheckUtils]: 15: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {18379#true} is VALID [2022-02-20 18:11:05,754 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18379#true} {18379#true} #245#return; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 13: Hoare triple {18379#true} assume true; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 12: Hoare triple {18379#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L272 TraceCheckUtils]: 11: Hoare triple {18379#true} call waterRise(); {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 10: Hoare triple {18379#true} assume 0 != test_~tmp~6#1; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 9: Hoare triple {18379#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 8: Hoare triple {18379#true} assume test_~splverifierCounter~0#1 < 4; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 7: Hoare triple {18379#true} assume !false; {18379#true} is VALID [2022-02-20 18:11:05,755 INFO L290 TraceCheckUtils]: 6: Hoare triple {18379#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 5: Hoare triple {18379#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 4: Hoare triple {18379#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 3: Hoare triple {18379#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 2: Hoare triple {18379#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 1: Hoare triple {18379#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L290 TraceCheckUtils]: 0: Hoare triple {18379#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {18379#true} is VALID [2022-02-20 18:11:05,756 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 12 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-02-20 18:11:05,757 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [896740353] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:11:05,757 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:11:05,757 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-02-20 18:11:05,757 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [832545828] [2022-02-20 18:11:05,757 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:11:05,759 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 76 [2022-02-20 18:11:05,759 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:05,760 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:05,802 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 90 edges. 90 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:05,802 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-20 18:11:05,803 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:05,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-20 18:11:05,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:05,803 INFO L87 Difference]: Start difference. First operand 625 states and 805 transitions. Second operand has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:07,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:07,352 INFO L93 Difference]: Finished difference Result 1492 states and 2027 transitions. [2022-02-20 18:11:07,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-02-20 18:11:07,352 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 76 [2022-02-20 18:11:07,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:07,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:07,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 439 transitions. [2022-02-20 18:11:07,357 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:07,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 439 transitions. [2022-02-20 18:11:07,361 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 27 states and 439 transitions. [2022-02-20 18:11:07,654 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:07,702 INFO L225 Difference]: With dead ends: 1492 [2022-02-20 18:11:07,703 INFO L226 Difference]: Without dead ends: 981 [2022-02-20 18:11:07,704 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 163 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 196 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-02-20 18:11:07,705 INFO L933 BasicCegarLoop]: 139 mSDtfsCounter, 312 mSDsluCounter, 442 mSDsCounter, 0 mSdLazyCounter, 480 mSolverCounterSat, 115 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 581 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 115 IncrementalHoareTripleChecker+Valid, 480 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:07,705 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [318 Valid, 581 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [115 Valid, 480 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-02-20 18:11:07,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 981 states. [2022-02-20 18:11:07,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 981 to 852. [2022-02-20 18:11:07,852 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:07,854 INFO L82 GeneralOperation]: Start isEquivalent. First operand 981 states. Second operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) [2022-02-20 18:11:07,855 INFO L74 IsIncluded]: Start isIncluded. First operand 981 states. Second operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) [2022-02-20 18:11:07,856 INFO L87 Difference]: Start difference. First operand 981 states. Second operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) [2022-02-20 18:11:07,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:07,906 INFO L93 Difference]: Finished difference Result 981 states and 1300 transitions. [2022-02-20 18:11:07,906 INFO L276 IsEmpty]: Start isEmpty. Operand 981 states and 1300 transitions. [2022-02-20 18:11:07,908 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:07,908 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:07,909 INFO L74 IsIncluded]: Start isIncluded. First operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) Second operand 981 states. [2022-02-20 18:11:07,910 INFO L87 Difference]: Start difference. First operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) Second operand 981 states. [2022-02-20 18:11:07,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:07,950 INFO L93 Difference]: Finished difference Result 981 states and 1300 transitions. [2022-02-20 18:11:07,950 INFO L276 IsEmpty]: Start isEmpty. Operand 981 states and 1300 transitions. [2022-02-20 18:11:07,952 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:07,952 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:07,952 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:07,952 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:07,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 852 states, 662 states have (on average 1.244712990936556) internal successors, (824), 713 states have internal predecessors, (824), 95 states have call successors, (95), 83 states have call predecessors, (95), 94 states have return successors, (198), 87 states have call predecessors, (198), 95 states have call successors, (198) [2022-02-20 18:11:07,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 852 states to 852 states and 1117 transitions. [2022-02-20 18:11:07,995 INFO L78 Accepts]: Start accepts. Automaton has 852 states and 1117 transitions. Word has length 76 [2022-02-20 18:11:07,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:07,996 INFO L470 AbstractCegarLoop]: Abstraction has 852 states and 1117 transitions. [2022-02-20 18:11:07,996 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 7.888888888888889) internal successors, (71), 6 states have internal predecessors, (71), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-02-20 18:11:07,996 INFO L276 IsEmpty]: Start isEmpty. Operand 852 states and 1117 transitions. [2022-02-20 18:11:07,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-02-20 18:11:07,998 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:07,998 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:08,022 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:08,222 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:11:08,222 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:08,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:08,223 INFO L85 PathProgramCache]: Analyzing trace with hash -1199368341, now seen corresponding path program 2 times [2022-02-20 18:11:08,223 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:08,223 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [810894484] [2022-02-20 18:11:08,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:08,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:08,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:08,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,271 INFO L290 TraceCheckUtils]: 0: Hoare triple {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24165#true} is VALID [2022-02-20 18:11:08,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,271 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {24165#true} {24165#true} #245#return; {24165#true} is VALID [2022-02-20 18:11:08,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:08,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:08,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,317 INFO L290 TraceCheckUtils]: 0: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,317 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {24165#true} is VALID [2022-02-20 18:11:08,317 INFO L290 TraceCheckUtils]: 2: Hoare triple {24165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,318 INFO L290 TraceCheckUtils]: 3: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,318 INFO L290 TraceCheckUtils]: 4: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,318 INFO L290 TraceCheckUtils]: 5: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,318 INFO L290 TraceCheckUtils]: 6: Hoare triple {24192#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,319 INFO L290 TraceCheckUtils]: 7: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,319 INFO L290 TraceCheckUtils]: 8: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,319 INFO L290 TraceCheckUtils]: 9: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,319 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {24192#(<= 2 ~waterLevel~0)} {24165#true} #239#return; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,320 INFO L290 TraceCheckUtils]: 0: Hoare triple {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,320 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24165#true} is VALID [2022-02-20 18:11:08,320 INFO L290 TraceCheckUtils]: 2: Hoare triple {24165#true} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,320 INFO L272 TraceCheckUtils]: 3: Hoare triple {24165#true} call processEnvironment__wrappee__highWaterSensor(); {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,320 INFO L290 TraceCheckUtils]: 4: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,320 INFO L290 TraceCheckUtils]: 5: Hoare triple {24165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {24165#true} is VALID [2022-02-20 18:11:08,321 INFO L290 TraceCheckUtils]: 6: Hoare triple {24165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,321 INFO L290 TraceCheckUtils]: 7: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,321 INFO L290 TraceCheckUtils]: 8: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,322 INFO L290 TraceCheckUtils]: 9: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,322 INFO L290 TraceCheckUtils]: 10: Hoare triple {24192#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,322 INFO L290 TraceCheckUtils]: 11: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,322 INFO L290 TraceCheckUtils]: 12: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,323 INFO L290 TraceCheckUtils]: 13: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,323 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {24192#(<= 2 ~waterLevel~0)} {24165#true} #239#return; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,323 INFO L290 TraceCheckUtils]: 15: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,323 INFO L290 TraceCheckUtils]: 16: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,324 INFO L290 TraceCheckUtils]: 17: Hoare triple {24192#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,324 INFO L290 TraceCheckUtils]: 18: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,324 INFO L290 TraceCheckUtils]: 19: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,324 INFO L290 TraceCheckUtils]: 20: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,325 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {24192#(<= 2 ~waterLevel~0)} {24165#true} #251#return; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:11:08,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:11:08,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:08,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,384 INFO L290 TraceCheckUtils]: 0: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,384 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,384 INFO L290 TraceCheckUtils]: 0: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,384 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume !(0 == ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,384 INFO L272 TraceCheckUtils]: 2: Hoare triple {24165#true} call processEnvironment__wrappee__base(); {24165#true} is VALID [2022-02-20 18:11:08,384 INFO L290 TraceCheckUtils]: 3: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,385 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,385 INFO L290 TraceCheckUtils]: 5: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,385 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {24165#true} {24242#(<= |old(~waterLevel~0)| 1)} #237#return; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,385 INFO L290 TraceCheckUtils]: 0: Hoare triple {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:08,386 INFO L290 TraceCheckUtils]: 1: Hoare triple {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,386 INFO L290 TraceCheckUtils]: 2: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,387 INFO L290 TraceCheckUtils]: 3: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,387 INFO L290 TraceCheckUtils]: 4: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {24240#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (<= |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:11:08,388 INFO L290 TraceCheckUtils]: 5: Hoare triple {24240#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (<= |old(~waterLevel~0)| 1))} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {24241#(or (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (<= |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:11:08,388 INFO L290 TraceCheckUtils]: 6: Hoare triple {24241#(or (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (<= |old(~waterLevel~0)| 1))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,388 INFO L290 TraceCheckUtils]: 7: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,389 INFO L290 TraceCheckUtils]: 8: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,389 INFO L290 TraceCheckUtils]: 9: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume !(0 != processEnvironment_~tmp~3#1); {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,389 INFO L272 TraceCheckUtils]: 10: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} call processEnvironment__wrappee__highWaterSensor(); {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,389 INFO L290 TraceCheckUtils]: 11: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,389 INFO L290 TraceCheckUtils]: 12: Hoare triple {24165#true} assume !(0 == ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,390 INFO L272 TraceCheckUtils]: 13: Hoare triple {24165#true} call processEnvironment__wrappee__base(); {24165#true} is VALID [2022-02-20 18:11:08,390 INFO L290 TraceCheckUtils]: 14: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,390 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,390 INFO L290 TraceCheckUtils]: 16: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,390 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {24165#true} {24242#(<= |old(~waterLevel~0)| 1)} #237#return; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,390 INFO L290 TraceCheckUtils]: 18: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,391 INFO L290 TraceCheckUtils]: 19: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,391 INFO L290 TraceCheckUtils]: 20: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,391 INFO L290 TraceCheckUtils]: 21: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,392 INFO L290 TraceCheckUtils]: 22: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,392 INFO L290 TraceCheckUtils]: 23: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,392 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {24242#(<= |old(~waterLevel~0)| 1)} {24192#(<= 2 ~waterLevel~0)} #251#return; {24166#false} is VALID [2022-02-20 18:11:08,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-02-20 18:11:08,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:08,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,401 INFO L290 TraceCheckUtils]: 0: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,401 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,401 INFO L290 TraceCheckUtils]: 0: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume !(0 == ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L272 TraceCheckUtils]: 2: Hoare triple {24165#true} call processEnvironment__wrappee__base(); {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L290 TraceCheckUtils]: 3: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L290 TraceCheckUtils]: 5: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,402 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {24165#true} {24166#false} #237#return; {24166#false} is VALID [2022-02-20 18:11:08,402 INFO L290 TraceCheckUtils]: 0: Hoare triple {24165#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 2: Hoare triple {24165#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 3: Hoare triple {24165#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 4: Hoare triple {24165#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 5: Hoare triple {24165#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 6: Hoare triple {24165#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 7: Hoare triple {24165#true} assume !false; {24165#true} is VALID [2022-02-20 18:11:08,403 INFO L290 TraceCheckUtils]: 8: Hoare triple {24165#true} assume test_~splverifierCounter~0#1 < 4; {24165#true} is VALID [2022-02-20 18:11:08,404 INFO L290 TraceCheckUtils]: 9: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24165#true} is VALID [2022-02-20 18:11:08,404 INFO L290 TraceCheckUtils]: 10: Hoare triple {24165#true} assume 0 != test_~tmp~6#1; {24165#true} is VALID [2022-02-20 18:11:08,404 INFO L272 TraceCheckUtils]: 11: Hoare triple {24165#true} call waterRise(); {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:08,404 INFO L290 TraceCheckUtils]: 12: Hoare triple {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24165#true} is VALID [2022-02-20 18:11:08,404 INFO L290 TraceCheckUtils]: 13: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,404 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {24165#true} {24165#true} #245#return; {24165#true} is VALID [2022-02-20 18:11:08,405 INFO L290 TraceCheckUtils]: 15: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24165#true} is VALID [2022-02-20 18:11:08,405 INFO L290 TraceCheckUtils]: 16: Hoare triple {24165#true} assume !(0 != test_~tmp___0~3#1); {24165#true} is VALID [2022-02-20 18:11:08,405 INFO L290 TraceCheckUtils]: 17: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24165#true} is VALID [2022-02-20 18:11:08,405 INFO L290 TraceCheckUtils]: 18: Hoare triple {24165#true} assume 0 != test_~tmp___2~0#1; {24165#true} is VALID [2022-02-20 18:11:08,405 INFO L272 TraceCheckUtils]: 19: Hoare triple {24165#true} call timeShift(); {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:08,405 INFO L290 TraceCheckUtils]: 20: Hoare triple {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,406 INFO L290 TraceCheckUtils]: 21: Hoare triple {24165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24165#true} is VALID [2022-02-20 18:11:08,406 INFO L290 TraceCheckUtils]: 22: Hoare triple {24165#true} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,406 INFO L272 TraceCheckUtils]: 23: Hoare triple {24165#true} call processEnvironment__wrappee__highWaterSensor(); {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,406 INFO L290 TraceCheckUtils]: 24: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,406 INFO L290 TraceCheckUtils]: 25: Hoare triple {24165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {24165#true} is VALID [2022-02-20 18:11:08,407 INFO L290 TraceCheckUtils]: 26: Hoare triple {24165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,407 INFO L290 TraceCheckUtils]: 27: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,407 INFO L290 TraceCheckUtils]: 28: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,419 INFO L290 TraceCheckUtils]: 29: Hoare triple {24192#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,420 INFO L290 TraceCheckUtils]: 30: Hoare triple {24192#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,420 INFO L290 TraceCheckUtils]: 31: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,420 INFO L290 TraceCheckUtils]: 32: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,420 INFO L290 TraceCheckUtils]: 33: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,421 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {24192#(<= 2 ~waterLevel~0)} {24165#true} #239#return; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 35: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,421 INFO L290 TraceCheckUtils]: 36: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 37: Hoare triple {24192#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 38: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 39: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,422 INFO L290 TraceCheckUtils]: 40: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume true; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,423 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {24192#(<= 2 ~waterLevel~0)} {24165#true} #251#return; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 42: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !false; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,423 INFO L290 TraceCheckUtils]: 43: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,424 INFO L290 TraceCheckUtils]: 44: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,424 INFO L290 TraceCheckUtils]: 45: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,424 INFO L290 TraceCheckUtils]: 46: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,424 INFO L290 TraceCheckUtils]: 47: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,425 INFO L290 TraceCheckUtils]: 48: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,425 INFO L290 TraceCheckUtils]: 49: Hoare triple {24192#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {24192#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:08,425 INFO L272 TraceCheckUtils]: 50: Hoare triple {24192#(<= 2 ~waterLevel~0)} call timeShift(); {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:08,426 INFO L290 TraceCheckUtils]: 51: Hoare triple {24226#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:08,426 INFO L290 TraceCheckUtils]: 52: Hoare triple {24225#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,426 INFO L290 TraceCheckUtils]: 53: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,426 INFO L290 TraceCheckUtils]: 54: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:08,427 INFO L290 TraceCheckUtils]: 55: Hoare triple {24239#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {24240#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (<= |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:11:08,427 INFO L290 TraceCheckUtils]: 56: Hoare triple {24240#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (<= |old(~waterLevel~0)| 1))} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {24241#(or (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (<= |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:11:08,428 INFO L290 TraceCheckUtils]: 57: Hoare triple {24241#(or (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (<= |old(~waterLevel~0)| 1))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,428 INFO L290 TraceCheckUtils]: 58: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,428 INFO L290 TraceCheckUtils]: 59: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,429 INFO L290 TraceCheckUtils]: 60: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume !(0 != processEnvironment_~tmp~3#1); {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,429 INFO L272 TraceCheckUtils]: 61: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} call processEnvironment__wrappee__highWaterSensor(); {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,429 INFO L290 TraceCheckUtils]: 62: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,429 INFO L290 TraceCheckUtils]: 63: Hoare triple {24165#true} assume !(0 == ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,429 INFO L272 TraceCheckUtils]: 64: Hoare triple {24165#true} call processEnvironment__wrappee__base(); {24165#true} is VALID [2022-02-20 18:11:08,429 INFO L290 TraceCheckUtils]: 65: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,429 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,429 INFO L290 TraceCheckUtils]: 67: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,430 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {24165#true} {24242#(<= |old(~waterLevel~0)| 1)} #237#return; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,430 INFO L290 TraceCheckUtils]: 69: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,430 INFO L290 TraceCheckUtils]: 70: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,430 INFO L290 TraceCheckUtils]: 71: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,431 INFO L290 TraceCheckUtils]: 72: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,431 INFO L290 TraceCheckUtils]: 73: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,431 INFO L290 TraceCheckUtils]: 74: Hoare triple {24242#(<= |old(~waterLevel~0)| 1)} assume true; {24242#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:08,432 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {24242#(<= |old(~waterLevel~0)| 1)} {24192#(<= 2 ~waterLevel~0)} #251#return; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 76: Hoare triple {24166#false} assume !false; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 77: Hoare triple {24166#false} assume test_~splverifierCounter~0#1 < 4; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 78: Hoare triple {24166#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 79: Hoare triple {24166#false} assume !(0 != test_~tmp~6#1); {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 80: Hoare triple {24166#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 81: Hoare triple {24166#false} assume !(0 != test_~tmp___0~3#1); {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 82: Hoare triple {24166#false} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 83: Hoare triple {24166#false} assume 0 != test_~tmp___2~0#1; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L272 TraceCheckUtils]: 84: Hoare triple {24166#false} call timeShift(); {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 85: Hoare triple {24166#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 86: Hoare triple {24166#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 87: Hoare triple {24166#false} assume { :end_inline_lowerWaterLevel } true; {24166#false} is VALID [2022-02-20 18:11:08,432 INFO L290 TraceCheckUtils]: 88: Hoare triple {24166#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 89: Hoare triple {24166#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 90: Hoare triple {24166#false} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 91: Hoare triple {24166#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 92: Hoare triple {24166#false} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 93: Hoare triple {24166#false} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 94: Hoare triple {24166#false} assume !(0 != processEnvironment_~tmp~3#1); {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L272 TraceCheckUtils]: 95: Hoare triple {24166#false} call processEnvironment__wrappee__highWaterSensor(); {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 96: Hoare triple {24238#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 97: Hoare triple {24165#true} assume !(0 == ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L272 TraceCheckUtils]: 98: Hoare triple {24165#true} call processEnvironment__wrappee__base(); {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 99: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {24165#true} {24165#true} #257#return; {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 101: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,433 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {24165#true} {24166#false} #237#return; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 103: Hoare triple {24166#false} assume { :end_inline_processEnvironment } true; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 104: Hoare triple {24166#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24166#false} is VALID [2022-02-20 18:11:08,433 INFO L290 TraceCheckUtils]: 105: Hoare triple {24166#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24166#false} is VALID [2022-02-20 18:11:08,434 INFO L290 TraceCheckUtils]: 106: Hoare triple {24166#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {24166#false} is VALID [2022-02-20 18:11:08,434 INFO L290 TraceCheckUtils]: 107: Hoare triple {24166#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {24166#false} is VALID [2022-02-20 18:11:08,434 INFO L290 TraceCheckUtils]: 108: Hoare triple {24166#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {24166#false} is VALID [2022-02-20 18:11:08,434 INFO L290 TraceCheckUtils]: 109: Hoare triple {24166#false} assume !false; {24166#false} is VALID [2022-02-20 18:11:08,434 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 51 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-02-20 18:11:08,434 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:08,434 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [810894484] [2022-02-20 18:11:08,434 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [810894484] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:08,434 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [653972] [2022-02-20 18:11:08,435 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-20 18:11:08,435 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:08,435 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:08,436 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:08,440 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:11:08,522 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-20 18:11:08,523 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-20 18:11:08,524 INFO L263 TraceCheckSpWp]: Trace formula consists of 502 conjuncts, 10 conjunts are in the unsatisfiable core [2022-02-20 18:11:08,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:08,551 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:08,851 INFO L290 TraceCheckUtils]: 0: Hoare triple {24165#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {24165#true} is VALID [2022-02-20 18:11:08,851 INFO L290 TraceCheckUtils]: 1: Hoare triple {24165#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 2: Hoare triple {24165#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 3: Hoare triple {24165#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 4: Hoare triple {24165#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 5: Hoare triple {24165#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 6: Hoare triple {24165#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 7: Hoare triple {24165#true} assume !false; {24165#true} is VALID [2022-02-20 18:11:08,852 INFO L290 TraceCheckUtils]: 8: Hoare triple {24165#true} assume test_~splverifierCounter~0#1 < 4; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L290 TraceCheckUtils]: 9: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L290 TraceCheckUtils]: 10: Hoare triple {24165#true} assume 0 != test_~tmp~6#1; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L272 TraceCheckUtils]: 11: Hoare triple {24165#true} call waterRise(); {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L290 TraceCheckUtils]: 12: Hoare triple {24165#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L290 TraceCheckUtils]: 13: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {24165#true} {24165#true} #245#return; {24165#true} is VALID [2022-02-20 18:11:08,853 INFO L290 TraceCheckUtils]: 15: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 16: Hoare triple {24165#true} assume !(0 != test_~tmp___0~3#1); {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 17: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 18: Hoare triple {24165#true} assume 0 != test_~tmp___2~0#1; {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L272 TraceCheckUtils]: 19: Hoare triple {24165#true} call timeShift(); {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 20: Hoare triple {24165#true} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 21: Hoare triple {24165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24165#true} is VALID [2022-02-20 18:11:08,854 INFO L290 TraceCheckUtils]: 22: Hoare triple {24165#true} assume !(0 != ~pumpRunning~0); {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L272 TraceCheckUtils]: 23: Hoare triple {24165#true} call processEnvironment__wrappee__highWaterSensor(); {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 24: Hoare triple {24165#true} havoc ~tmp~2#1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 25: Hoare triple {24165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 26: Hoare triple {24165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 27: Hoare triple {24165#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 28: Hoare triple {24165#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 29: Hoare triple {24165#true} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {24165#true} is VALID [2022-02-20 18:11:08,855 INFO L290 TraceCheckUtils]: 30: Hoare triple {24165#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 31: Hoare triple {24165#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 32: Hoare triple {24165#true} assume { :end_inline_activatePump } true; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 33: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {24165#true} {24165#true} #239#return; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 35: Hoare triple {24165#true} assume { :end_inline_processEnvironment } true; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 36: Hoare triple {24165#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24165#true} is VALID [2022-02-20 18:11:08,856 INFO L290 TraceCheckUtils]: 37: Hoare triple {24165#true} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 38: Hoare triple {24165#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 39: Hoare triple {24165#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 40: Hoare triple {24165#true} assume true; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {24165#true} {24165#true} #251#return; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 42: Hoare triple {24165#true} assume !false; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 43: Hoare triple {24165#true} assume test_~splverifierCounter~0#1 < 4; {24165#true} is VALID [2022-02-20 18:11:08,857 INFO L290 TraceCheckUtils]: 44: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 45: Hoare triple {24165#true} assume !(0 != test_~tmp~6#1); {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 46: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 47: Hoare triple {24165#true} assume !(0 != test_~tmp___0~3#1); {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 48: Hoare triple {24165#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 49: Hoare triple {24165#true} assume 0 != test_~tmp___2~0#1; {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L272 TraceCheckUtils]: 50: Hoare triple {24165#true} call timeShift(); {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 51: Hoare triple {24165#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {24165#true} is VALID [2022-02-20 18:11:08,858 INFO L290 TraceCheckUtils]: 52: Hoare triple {24165#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24165#true} is VALID [2022-02-20 18:11:08,859 INFO L290 TraceCheckUtils]: 53: Hoare triple {24165#true} assume { :end_inline_lowerWaterLevel } true; {24165#true} is VALID [2022-02-20 18:11:08,859 INFO L290 TraceCheckUtils]: 54: Hoare triple {24165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24165#true} is VALID [2022-02-20 18:11:08,860 INFO L290 TraceCheckUtils]: 55: Hoare triple {24165#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {24422#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:08,860 INFO L290 TraceCheckUtils]: 56: Hoare triple {24422#(or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (not (= ~waterLevel~0 0))) (and (= |timeShift_isLowWaterSensorDry_#res#1| 1) (= ~waterLevel~0 0)))} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {24426#(or (and (= |timeShift_isLowWaterLevel_~tmp~5#1| 1) (= ~waterLevel~0 0)) (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)))} is VALID [2022-02-20 18:11:08,861 INFO L290 TraceCheckUtils]: 57: Hoare triple {24426#(or (and (= |timeShift_isLowWaterLevel_~tmp~5#1| 1) (= ~waterLevel~0 0)) (and (not (= ~waterLevel~0 0)) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,861 INFO L290 TraceCheckUtils]: 58: Hoare triple {24430#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,861 INFO L290 TraceCheckUtils]: 59: Hoare triple {24430#(= ~waterLevel~0 0)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,861 INFO L290 TraceCheckUtils]: 60: Hoare triple {24430#(= ~waterLevel~0 0)} assume !(0 != processEnvironment_~tmp~3#1); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,862 INFO L272 TraceCheckUtils]: 61: Hoare triple {24430#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,862 INFO L290 TraceCheckUtils]: 62: Hoare triple {24430#(= ~waterLevel~0 0)} havoc ~tmp~2#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,862 INFO L290 TraceCheckUtils]: 63: Hoare triple {24430#(= ~waterLevel~0 0)} assume !(0 == ~pumpRunning~0); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,863 INFO L272 TraceCheckUtils]: 64: Hoare triple {24430#(= ~waterLevel~0 0)} call processEnvironment__wrappee__base(); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,863 INFO L290 TraceCheckUtils]: 65: Hoare triple {24430#(= ~waterLevel~0 0)} assume true; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,863 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {24430#(= ~waterLevel~0 0)} {24430#(= ~waterLevel~0 0)} #257#return; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,864 INFO L290 TraceCheckUtils]: 67: Hoare triple {24430#(= ~waterLevel~0 0)} assume true; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,864 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {24430#(= ~waterLevel~0 0)} {24430#(= ~waterLevel~0 0)} #237#return; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,864 INFO L290 TraceCheckUtils]: 69: Hoare triple {24430#(= ~waterLevel~0 0)} assume { :end_inline_processEnvironment } true; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,865 INFO L290 TraceCheckUtils]: 70: Hoare triple {24430#(= ~waterLevel~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,865 INFO L290 TraceCheckUtils]: 71: Hoare triple {24430#(= ~waterLevel~0 0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,865 INFO L290 TraceCheckUtils]: 72: Hoare triple {24430#(= ~waterLevel~0 0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,865 INFO L290 TraceCheckUtils]: 73: Hoare triple {24430#(= ~waterLevel~0 0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,866 INFO L290 TraceCheckUtils]: 74: Hoare triple {24430#(= ~waterLevel~0 0)} assume true; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,866 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {24430#(= ~waterLevel~0 0)} {24165#true} #251#return; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,866 INFO L290 TraceCheckUtils]: 76: Hoare triple {24430#(= ~waterLevel~0 0)} assume !false; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,867 INFO L290 TraceCheckUtils]: 77: Hoare triple {24430#(= ~waterLevel~0 0)} assume test_~splverifierCounter~0#1 < 4; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,867 INFO L290 TraceCheckUtils]: 78: Hoare triple {24430#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,867 INFO L290 TraceCheckUtils]: 79: Hoare triple {24430#(= ~waterLevel~0 0)} assume !(0 != test_~tmp~6#1); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,867 INFO L290 TraceCheckUtils]: 80: Hoare triple {24430#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,868 INFO L290 TraceCheckUtils]: 81: Hoare triple {24430#(= ~waterLevel~0 0)} assume !(0 != test_~tmp___0~3#1); {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,868 INFO L290 TraceCheckUtils]: 82: Hoare triple {24430#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,868 INFO L290 TraceCheckUtils]: 83: Hoare triple {24430#(= ~waterLevel~0 0)} assume 0 != test_~tmp___2~0#1; {24430#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,869 INFO L272 TraceCheckUtils]: 84: Hoare triple {24430#(= ~waterLevel~0 0)} call timeShift(); {24512#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,869 INFO L290 TraceCheckUtils]: 85: Hoare triple {24512#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {24512#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:08,869 INFO L290 TraceCheckUtils]: 86: Hoare triple {24512#(<= ~waterLevel~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24166#false} is VALID [2022-02-20 18:11:08,869 INFO L290 TraceCheckUtils]: 87: Hoare triple {24166#false} assume { :end_inline_lowerWaterLevel } true; {24166#false} is VALID [2022-02-20 18:11:08,869 INFO L290 TraceCheckUtils]: 88: Hoare triple {24166#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 89: Hoare triple {24166#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 90: Hoare triple {24166#false} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 91: Hoare triple {24166#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 92: Hoare triple {24166#false} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 93: Hoare triple {24166#false} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 94: Hoare triple {24166#false} assume !(0 != processEnvironment_~tmp~3#1); {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L272 TraceCheckUtils]: 95: Hoare triple {24166#false} call processEnvironment__wrappee__highWaterSensor(); {24166#false} is VALID [2022-02-20 18:11:08,870 INFO L290 TraceCheckUtils]: 96: Hoare triple {24166#false} havoc ~tmp~2#1; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 97: Hoare triple {24166#false} assume !(0 == ~pumpRunning~0); {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L272 TraceCheckUtils]: 98: Hoare triple {24166#false} call processEnvironment__wrappee__base(); {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 99: Hoare triple {24166#false} assume true; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {24166#false} {24166#false} #257#return; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 101: Hoare triple {24166#false} assume true; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {24166#false} {24166#false} #237#return; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 103: Hoare triple {24166#false} assume { :end_inline_processEnvironment } true; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 104: Hoare triple {24166#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {24166#false} is VALID [2022-02-20 18:11:08,871 INFO L290 TraceCheckUtils]: 105: Hoare triple {24166#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {24166#false} is VALID [2022-02-20 18:11:08,872 INFO L290 TraceCheckUtils]: 106: Hoare triple {24166#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {24166#false} is VALID [2022-02-20 18:11:08,872 INFO L290 TraceCheckUtils]: 107: Hoare triple {24166#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {24166#false} is VALID [2022-02-20 18:11:08,872 INFO L290 TraceCheckUtils]: 108: Hoare triple {24166#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {24166#false} is VALID [2022-02-20 18:11:08,872 INFO L290 TraceCheckUtils]: 109: Hoare triple {24166#false} assume !false; {24166#false} is VALID [2022-02-20 18:11:08,872 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 62 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-02-20 18:11:08,872 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:08,873 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [653972] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:08,873 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:08,873 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-02-20 18:11:08,873 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [780152837] [2022-02-20 18:11:08,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:08,877 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 110 [2022-02-20 18:11:08,877 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:08,877 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:08,937 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:08,938 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:08,938 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:08,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:08,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:11:08,938 INFO L87 Difference]: Start difference. First operand 852 states and 1117 transitions. Second operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:10,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:10,106 INFO L93 Difference]: Finished difference Result 2343 states and 3191 transitions. [2022-02-20 18:11:10,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-20 18:11:10,106 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 110 [2022-02-20 18:11:10,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:10,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:10,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 382 transitions. [2022-02-20 18:11:10,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:10,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 382 transitions. [2022-02-20 18:11:10,113 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 382 transitions. [2022-02-20 18:11:10,336 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 382 edges. 382 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:10,465 INFO L225 Difference]: With dead ends: 2343 [2022-02-20 18:11:10,465 INFO L226 Difference]: Without dead ends: 1603 [2022-02-20 18:11:10,468 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 123 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:10,468 INFO L933 BasicCegarLoop]: 154 mSDtfsCounter, 222 mSDsluCounter, 452 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 606 SdHoareTripleChecker+Invalid, 178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:10,468 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [222 Valid, 606 Invalid, 178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:10,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1603 states. [2022-02-20 18:11:10,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1603 to 1483. [2022-02-20 18:11:10,788 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:10,790 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1603 states. Second operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) [2022-02-20 18:11:10,792 INFO L74 IsIncluded]: Start isIncluded. First operand 1603 states. Second operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) [2022-02-20 18:11:10,793 INFO L87 Difference]: Start difference. First operand 1603 states. Second operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) [2022-02-20 18:11:10,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:10,881 INFO L93 Difference]: Finished difference Result 1603 states and 2058 transitions. [2022-02-20 18:11:10,881 INFO L276 IsEmpty]: Start isEmpty. Operand 1603 states and 2058 transitions. [2022-02-20 18:11:10,885 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:10,885 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:10,887 INFO L74 IsIncluded]: Start isIncluded. First operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) Second operand 1603 states. [2022-02-20 18:11:10,888 INFO L87 Difference]: Start difference. First operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) Second operand 1603 states. [2022-02-20 18:11:10,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:10,991 INFO L93 Difference]: Finished difference Result 1603 states and 2058 transitions. [2022-02-20 18:11:10,991 INFO L276 IsEmpty]: Start isEmpty. Operand 1603 states and 2058 transitions. [2022-02-20 18:11:10,995 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:10,995 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:10,995 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:10,995 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:10,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1483 states, 1156 states have (on average 1.2439446366782008) internal successors, (1438), 1234 states have internal predecessors, (1438), 166 states have call successors, (166), 148 states have call predecessors, (166), 160 states have return successors, (304), 150 states have call predecessors, (304), 166 states have call successors, (304) [2022-02-20 18:11:11,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1483 states to 1483 states and 1908 transitions. [2022-02-20 18:11:11,097 INFO L78 Accepts]: Start accepts. Automaton has 1483 states and 1908 transitions. Word has length 110 [2022-02-20 18:11:11,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:11,098 INFO L470 AbstractCegarLoop]: Abstraction has 1483 states and 1908 transitions. [2022-02-20 18:11:11,098 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.166666666666666) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-02-20 18:11:11,098 INFO L276 IsEmpty]: Start isEmpty. Operand 1483 states and 1908 transitions. [2022-02-20 18:11:11,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-02-20 18:11:11,111 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:11,111 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:11,130 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:11,323 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:11:11,323 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:11,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:11,324 INFO L85 PathProgramCache]: Analyzing trace with hash -755467667, now seen corresponding path program 1 times [2022-02-20 18:11:11,324 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:11,324 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267255484] [2022-02-20 18:11:11,324 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:11,324 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:11,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:11,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,373 INFO L290 TraceCheckUtils]: 0: Hoare triple {33224#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {33165#true} is VALID [2022-02-20 18:11:11,373 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,374 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {33165#true} {33165#true} #245#return; {33165#true} is VALID [2022-02-20 18:11:11,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:11,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:11,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,386 INFO L290 TraceCheckUtils]: 0: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 2: Hoare triple {33165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 3: Hoare triple {33165#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 4: Hoare triple {33165#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 6: Hoare triple {33165#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 7: Hoare triple {33165#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {33165#true} is VALID [2022-02-20 18:11:11,387 INFO L290 TraceCheckUtils]: 8: Hoare triple {33165#true} assume { :end_inline_activatePump } true; {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L290 TraceCheckUtils]: 9: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {33165#true} {33165#true} #239#return; {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L290 TraceCheckUtils]: 0: Hoare triple {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L290 TraceCheckUtils]: 2: Hoare triple {33165#true} assume !(0 != ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,388 INFO L272 TraceCheckUtils]: 3: Hoare triple {33165#true} call processEnvironment__wrappee__highWaterSensor(); {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 4: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 6: Hoare triple {33165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 7: Hoare triple {33165#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 8: Hoare triple {33165#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 9: Hoare triple {33165#true} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 10: Hoare triple {33165#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {33165#true} is VALID [2022-02-20 18:11:11,389 INFO L290 TraceCheckUtils]: 11: Hoare triple {33165#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 12: Hoare triple {33165#true} assume { :end_inline_activatePump } true; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 13: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {33165#true} {33165#true} #239#return; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 15: Hoare triple {33165#true} assume { :end_inline_processEnvironment } true; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 16: Hoare triple {33165#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 17: Hoare triple {33165#true} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 18: Hoare triple {33165#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 19: Hoare triple {33165#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {33165#true} is VALID [2022-02-20 18:11:11,390 INFO L290 TraceCheckUtils]: 20: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,391 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {33165#true} {33165#true} #251#return; {33165#true} is VALID [2022-02-20 18:11:11,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:11:11,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:11:11,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:11,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,419 INFO L290 TraceCheckUtils]: 0: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,419 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L290 TraceCheckUtils]: 0: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume !(0 == ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L272 TraceCheckUtils]: 2: Hoare triple {33165#true} call processEnvironment__wrappee__base(); {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L290 TraceCheckUtils]: 3: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,420 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {33165#true} {33166#false} #237#return; {33166#false} is VALID [2022-02-20 18:11:11,420 INFO L290 TraceCheckUtils]: 0: Hoare triple {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 2: Hoare triple {33165#true} assume { :end_inline_lowerWaterLevel } true; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 3: Hoare triple {33165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 4: Hoare triple {33165#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {33165#true} is VALID [2022-02-20 18:11:11,421 INFO L290 TraceCheckUtils]: 6: Hoare triple {33165#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~2#1 := 1; {33238#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} is VALID [2022-02-20 18:11:11,422 INFO L290 TraceCheckUtils]: 7: Hoare triple {33238#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {33239#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:11,422 INFO L290 TraceCheckUtils]: 8: Hoare triple {33239#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {33240#(<= 1 |timeShift_processEnvironment_~tmp~3#1|)} is VALID [2022-02-20 18:11:11,422 INFO L290 TraceCheckUtils]: 9: Hoare triple {33240#(<= 1 |timeShift_processEnvironment_~tmp~3#1|)} assume !(0 != processEnvironment_~tmp~3#1); {33166#false} is VALID [2022-02-20 18:11:11,423 INFO L272 TraceCheckUtils]: 10: Hoare triple {33166#false} call processEnvironment__wrappee__highWaterSensor(); {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:11,423 INFO L290 TraceCheckUtils]: 11: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L290 TraceCheckUtils]: 12: Hoare triple {33165#true} assume !(0 == ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L272 TraceCheckUtils]: 13: Hoare triple {33165#true} call processEnvironment__wrappee__base(); {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L290 TraceCheckUtils]: 14: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L290 TraceCheckUtils]: 16: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,423 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {33165#true} {33166#false} #237#return; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 18: Hoare triple {33166#false} assume { :end_inline_processEnvironment } true; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 19: Hoare triple {33166#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 20: Hoare triple {33166#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 21: Hoare triple {33166#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 22: Hoare triple {33166#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L290 TraceCheckUtils]: 23: Hoare triple {33166#false} assume true; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {33166#false} {33165#true} #251#return; {33166#false} is VALID [2022-02-20 18:11:11,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-02-20 18:11:11,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:11,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:11,429 INFO L290 TraceCheckUtils]: 0: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L290 TraceCheckUtils]: 0: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume !(0 == ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L272 TraceCheckUtils]: 2: Hoare triple {33165#true} call processEnvironment__wrappee__base(); {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L290 TraceCheckUtils]: 3: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,430 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {33165#true} {33166#false} #237#return; {33166#false} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 0: Hoare triple {33165#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 1: Hoare triple {33165#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 2: Hoare triple {33165#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 3: Hoare triple {33165#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~6#1;havoc valid_product_~retValue_acc~6#1;valid_product_~retValue_acc~6#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~6#1; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 4: Hoare triple {33165#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 5: Hoare triple {33165#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {33165#true} is VALID [2022-02-20 18:11:11,431 INFO L290 TraceCheckUtils]: 6: Hoare triple {33165#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_#t~nondet29#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {33165#true} is VALID [2022-02-20 18:11:11,432 INFO L290 TraceCheckUtils]: 7: Hoare triple {33165#true} assume !false; {33165#true} is VALID [2022-02-20 18:11:11,432 INFO L290 TraceCheckUtils]: 8: Hoare triple {33165#true} assume test_~splverifierCounter~0#1 < 4; {33165#true} is VALID [2022-02-20 18:11:11,432 INFO L290 TraceCheckUtils]: 9: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {33165#true} is VALID [2022-02-20 18:11:11,432 INFO L290 TraceCheckUtils]: 10: Hoare triple {33165#true} assume 0 != test_~tmp~6#1; {33165#true} is VALID [2022-02-20 18:11:11,432 INFO L272 TraceCheckUtils]: 11: Hoare triple {33165#true} call waterRise(); {33224#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:11,432 INFO L290 TraceCheckUtils]: 12: Hoare triple {33224#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L290 TraceCheckUtils]: 13: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {33165#true} {33165#true} #245#return; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L290 TraceCheckUtils]: 15: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L290 TraceCheckUtils]: 16: Hoare triple {33165#true} assume !(0 != test_~tmp___0~3#1); {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L290 TraceCheckUtils]: 17: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L290 TraceCheckUtils]: 18: Hoare triple {33165#true} assume 0 != test_~tmp___2~0#1; {33165#true} is VALID [2022-02-20 18:11:11,433 INFO L272 TraceCheckUtils]: 19: Hoare triple {33165#true} call timeShift(); {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:11,434 INFO L290 TraceCheckUtils]: 20: Hoare triple {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,434 INFO L290 TraceCheckUtils]: 21: Hoare triple {33165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {33165#true} is VALID [2022-02-20 18:11:11,434 INFO L290 TraceCheckUtils]: 22: Hoare triple {33165#true} assume !(0 != ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,434 INFO L272 TraceCheckUtils]: 23: Hoare triple {33165#true} call processEnvironment__wrappee__highWaterSensor(); {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:11,434 INFO L290 TraceCheckUtils]: 24: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,434 INFO L290 TraceCheckUtils]: 25: Hoare triple {33165#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~9#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~9#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~3#1;havoc isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 26: Hoare triple {33165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~3#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~3#1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 27: Hoare triple {33165#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 28: Hoare triple {33165#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 29: Hoare triple {33165#true} isHighWaterLevel_~retValue_acc~9#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~9#1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 30: Hoare triple {33165#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 31: Hoare triple {33165#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {33165#true} is VALID [2022-02-20 18:11:11,435 INFO L290 TraceCheckUtils]: 32: Hoare triple {33165#true} assume { :end_inline_activatePump } true; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 33: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {33165#true} {33165#true} #239#return; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 35: Hoare triple {33165#true} assume { :end_inline_processEnvironment } true; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 36: Hoare triple {33165#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 37: Hoare triple {33165#true} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 38: Hoare triple {33165#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 39: Hoare triple {33165#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L290 TraceCheckUtils]: 40: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,436 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {33165#true} {33165#true} #251#return; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 42: Hoare triple {33165#true} assume !false; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 43: Hoare triple {33165#true} assume test_~splverifierCounter~0#1 < 4; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 44: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 45: Hoare triple {33165#true} assume !(0 != test_~tmp~6#1); {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 46: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 47: Hoare triple {33165#true} assume !(0 != test_~tmp___0~3#1); {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 48: Hoare triple {33165#true} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {33165#true} is VALID [2022-02-20 18:11:11,437 INFO L290 TraceCheckUtils]: 49: Hoare triple {33165#true} assume 0 != test_~tmp___2~0#1; {33165#true} is VALID [2022-02-20 18:11:11,438 INFO L272 TraceCheckUtils]: 50: Hoare triple {33165#true} call timeShift(); {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:11,438 INFO L290 TraceCheckUtils]: 51: Hoare triple {33225#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {33165#true} is VALID [2022-02-20 18:11:11,438 INFO L290 TraceCheckUtils]: 52: Hoare triple {33165#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {33165#true} is VALID [2022-02-20 18:11:11,438 INFO L290 TraceCheckUtils]: 53: Hoare triple {33165#true} assume { :end_inline_lowerWaterLevel } true; {33165#true} is VALID [2022-02-20 18:11:11,438 INFO L290 TraceCheckUtils]: 54: Hoare triple {33165#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {33165#true} is VALID [2022-02-20 18:11:11,438 INFO L290 TraceCheckUtils]: 55: Hoare triple {33165#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {33165#true} is VALID [2022-02-20 18:11:11,439 INFO L290 TraceCheckUtils]: 56: Hoare triple {33165#true} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {33165#true} is VALID [2022-02-20 18:11:11,439 INFO L290 TraceCheckUtils]: 57: Hoare triple {33165#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~2#1 := 1; {33238#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} is VALID [2022-02-20 18:11:11,439 INFO L290 TraceCheckUtils]: 58: Hoare triple {33238#(<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {33239#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:11,440 INFO L290 TraceCheckUtils]: 59: Hoare triple {33239#(<= 1 |timeShift_isLowWaterLevel_#res#1|)} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {33240#(<= 1 |timeShift_processEnvironment_~tmp~3#1|)} is VALID [2022-02-20 18:11:11,440 INFO L290 TraceCheckUtils]: 60: Hoare triple {33240#(<= 1 |timeShift_processEnvironment_~tmp~3#1|)} assume !(0 != processEnvironment_~tmp~3#1); {33166#false} is VALID [2022-02-20 18:11:11,440 INFO L272 TraceCheckUtils]: 61: Hoare triple {33166#false} call processEnvironment__wrappee__highWaterSensor(); {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:11,440 INFO L290 TraceCheckUtils]: 62: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,440 INFO L290 TraceCheckUtils]: 63: Hoare triple {33165#true} assume !(0 == ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,440 INFO L272 TraceCheckUtils]: 64: Hoare triple {33165#true} call processEnvironment__wrappee__base(); {33165#true} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 65: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,441 INFO L284 TraceCheckUtils]: 66: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 67: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,441 INFO L284 TraceCheckUtils]: 68: Hoare quadruple {33165#true} {33166#false} #237#return; {33166#false} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 69: Hoare triple {33166#false} assume { :end_inline_processEnvironment } true; {33166#false} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 70: Hoare triple {33166#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {33166#false} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 71: Hoare triple {33166#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {33166#false} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 72: Hoare triple {33166#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {33166#false} is VALID [2022-02-20 18:11:11,441 INFO L290 TraceCheckUtils]: 73: Hoare triple {33166#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 74: Hoare triple {33166#false} assume true; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {33166#false} {33165#true} #251#return; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 76: Hoare triple {33166#false} assume !false; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 77: Hoare triple {33166#false} assume test_~splverifierCounter~0#1 < 4; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 78: Hoare triple {33166#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 79: Hoare triple {33166#false} assume !(0 != test_~tmp~6#1); {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 80: Hoare triple {33166#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {33166#false} is VALID [2022-02-20 18:11:11,442 INFO L290 TraceCheckUtils]: 81: Hoare triple {33166#false} assume !(0 != test_~tmp___0~3#1); {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 82: Hoare triple {33166#false} assume -2147483648 <= test_#t~nondet28#1 && test_#t~nondet28#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet28#1;havoc test_#t~nondet28#1; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 83: Hoare triple {33166#false} assume 0 != test_~tmp___2~0#1; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L272 TraceCheckUtils]: 84: Hoare triple {33166#false} call timeShift(); {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 85: Hoare triple {33166#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 86: Hoare triple {33166#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 87: Hoare triple {33166#false} assume { :end_inline_lowerWaterLevel } true; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 88: Hoare triple {33166#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {33166#false} is VALID [2022-02-20 18:11:11,443 INFO L290 TraceCheckUtils]: 89: Hoare triple {33166#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret25#1, isLowWaterLevel_~retValue_acc~10#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~2#1;havoc isLowWaterLevel_~retValue_acc~10#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~2#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;havoc isLowWaterSensorDry_~retValue_acc~4#1;isLowWaterSensorDry_~retValue_acc~4#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~4#1; {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 90: Hoare triple {33166#false} isLowWaterLevel_#t~ret25#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret25#1 && isLowWaterLevel_#t~ret25#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret25#1;havoc isLowWaterLevel_#t~ret25#1; {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 91: Hoare triple {33166#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~2#1 := 0; {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 92: Hoare triple {33166#false} isLowWaterLevel_~retValue_acc~10#1 := isLowWaterLevel_~tmp___0~2#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~10#1; {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 93: Hoare triple {33166#false} processEnvironment_#t~ret14#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 94: Hoare triple {33166#false} assume !(0 != processEnvironment_~tmp~3#1); {33166#false} is VALID [2022-02-20 18:11:11,444 INFO L272 TraceCheckUtils]: 95: Hoare triple {33166#false} call processEnvironment__wrappee__highWaterSensor(); {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 96: Hoare triple {33237#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {33165#true} is VALID [2022-02-20 18:11:11,444 INFO L290 TraceCheckUtils]: 97: Hoare triple {33165#true} assume !(0 == ~pumpRunning~0); {33165#true} is VALID [2022-02-20 18:11:11,445 INFO L272 TraceCheckUtils]: 98: Hoare triple {33165#true} call processEnvironment__wrappee__base(); {33165#true} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 99: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,445 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {33165#true} {33165#true} #257#return; {33165#true} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 101: Hoare triple {33165#true} assume true; {33165#true} is VALID [2022-02-20 18:11:11,445 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {33165#true} {33166#false} #237#return; {33166#false} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 103: Hoare triple {33166#false} assume { :end_inline_processEnvironment } true; {33166#false} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 104: Hoare triple {33166#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~2#1;havoc getWaterLevel_~retValue_acc~2#1;getWaterLevel_~retValue_acc~2#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~2#1; {33166#false} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 105: Hoare triple {33166#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {33166#false} is VALID [2022-02-20 18:11:11,445 INFO L290 TraceCheckUtils]: 106: Hoare triple {33166#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~8#1;havoc isPumpRunning_~retValue_acc~8#1;isPumpRunning_~retValue_acc~8#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~8#1; {33166#false} is VALID [2022-02-20 18:11:11,446 INFO L290 TraceCheckUtils]: 107: Hoare triple {33166#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {33166#false} is VALID [2022-02-20 18:11:11,446 INFO L290 TraceCheckUtils]: 108: Hoare triple {33166#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {33166#false} is VALID [2022-02-20 18:11:11,446 INFO L290 TraceCheckUtils]: 109: Hoare triple {33166#false} assume !false; {33166#false} is VALID [2022-02-20 18:11:11,446 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-02-20 18:11:11,446 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:11,446 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267255484] [2022-02-20 18:11:11,447 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267255484] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:11,447 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:11,447 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:11:11,447 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032925344] [2022-02-20 18:11:11,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:11,447 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 110 [2022-02-20 18:11:11,448 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:11,448 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:11,492 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 88 edges. 88 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:11,492 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:11:11,493 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:11,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:11:11,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:11:11,493 INFO L87 Difference]: Start difference. First operand 1483 states and 1908 transitions. Second operand has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:12,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:12,329 INFO L93 Difference]: Finished difference Result 2079 states and 2638 transitions. [2022-02-20 18:11:12,329 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:11:12,330 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 110 [2022-02-20 18:11:12,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:12,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:12,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 215 transitions. [2022-02-20 18:11:12,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:12,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 215 transitions. [2022-02-20 18:11:12,334 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 215 transitions. [2022-02-20 18:11:12,475 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 215 edges. 215 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:12,476 INFO L225 Difference]: With dead ends: 2079 [2022-02-20 18:11:12,476 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:11:12,479 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:12,480 INFO L933 BasicCegarLoop]: 81 mSDtfsCounter, 82 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 223 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 346 SdHoareTripleChecker+Invalid, 243 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 223 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:12,480 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [84 Valid, 346 Invalid, 243 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 223 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:11:12,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:11:12,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:11:12,480 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:12,480 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:12,481 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:12,481 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:12,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:12,481 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:12,481 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:12,481 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:12,481 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:12,481 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:12,482 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:12,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:12,482 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:12,482 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:12,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:12,482 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:12,482 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:12,482 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:12,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:12,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:11:12,483 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-02-20 18:11:12,483 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:12,483 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:11:12,483 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.5) internal successors, (76), 5 states have internal predecessors, (76), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-02-20 18:11:12,483 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:12,483 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:12,485 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:11:12,485 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-02-20 18:11:12,487 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:11:15,335 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 423 430) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-02-20 18:11:15,335 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 423 430) no Hoare annotation was computed. [2022-02-20 18:11:15,335 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 423 430) no Hoare annotation was computed. [2022-02-20 18:11:15,335 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 356 362) no Hoare annotation was computed. [2022-02-20 18:11:15,335 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 356 362) the Hoare annotation is: true [2022-02-20 18:11:15,335 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 214 225) the Hoare annotation is: true [2022-02-20 18:11:15,335 INFO L858 garLoopResultBuilder]: For program point L218-1(lines 214 225) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 214 225) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L854 garLoopResultBuilder]: At program point L263(lines 258 266) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (let ((.cse5 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (and .cse6 .cse8 .cse7 (not .cse2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) .cse5 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and .cse6 .cse7) .cse2 .cse3) (or .cse0 .cse5 .cse3) (or .cse0 (and .cse4 .cse8) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 332 355) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point L515(lines 515 519) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point L515-2(lines 515 519) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L854 garLoopResultBuilder]: At program point L404(line 404) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,336 INFO L854 garLoopResultBuilder]: At program point L400(line 400) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point L169(lines 169 175) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L858 garLoopResultBuilder]: For program point L165(lines 165 178) no Hoare annotation was computed. [2022-02-20 18:11:15,336 INFO L854 garLoopResultBuilder]: At program point L165-1(lines 157 181) the Hoare annotation is: (let ((.cse5 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse6 (<= 2 ~waterLevel~0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse9 (and .cse5 .cse6 .cse10 .cse7 (not .cse4)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or (and .cse1 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse2 (<= 1 ~waterLevel~0) .cse3 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4 (and .cse5 .cse6 .cse7) .cse8) (or .cse0 .cse9 .cse4 .cse8) (or .cse0 (and .cse1 .cse2 .cse3 .cse10) (not (<= 1 |old(~waterLevel~0)|)) .cse9)))) [2022-02-20 18:11:15,337 INFO L858 garLoopResultBuilder]: For program point L194(lines 194 198) no Hoare annotation was computed. [2022-02-20 18:11:15,337 INFO L854 garLoopResultBuilder]: At program point L194-2(lines 190 201) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,337 INFO L854 garLoopResultBuilder]: At program point L409(line 409) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse3)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 (not (= |old(~waterLevel~0)| 1))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse3 .cse4) (or .cse2 (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse4)))) [2022-02-20 18:11:15,337 INFO L854 garLoopResultBuilder]: At program point L409-1(lines 390 414) the Hoare annotation is: (let ((.cse3 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (and (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not .cse4))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) (and .cse0 .cse1 .cse2) (and .cse3 .cse1 .cse2))) (or .cse3 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:15,337 INFO L858 garLoopResultBuilder]: For program point L343-1(lines 343 349) no Hoare annotation was computed. [2022-02-20 18:11:15,337 INFO L854 garLoopResultBuilder]: At program point L521(lines 506 524) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0)) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,337 INFO L858 garLoopResultBuilder]: For program point L612(line 612) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L854 garLoopResultBuilder]: At program point L447(lines 442 450) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,338 INFO L854 garLoopResultBuilder]: At program point L286(lines 281 289) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,338 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 332 355) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:15,338 INFO L858 garLoopResultBuilder]: For program point L336-1(lines 335 354) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L858 garLoopResultBuilder]: For program point L398(lines 398 406) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 332 355) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L858 garLoopResultBuilder]: For program point L394(lines 394 411) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 612) no Hoare annotation was computed. [2022-02-20 18:11:15,338 INFO L854 garLoopResultBuilder]: At program point L613(lines 608 615) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-02-20 18:11:15,339 INFO L861 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-02-20 18:11:15,339 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-02-20 18:11:15,339 INFO L858 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-02-20 18:11:15,339 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-02-20 18:11:15,339 INFO L861 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-02-20 18:11:15,339 INFO L861 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-02-20 18:11:15,339 INFO L858 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-02-20 18:11:15,339 INFO L861 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-02-20 18:11:15,339 INFO L858 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L858 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L854 garLoopResultBuilder]: At program point L531(line 531) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-02-20 18:11:15,340 INFO L858 garLoopResultBuilder]: For program point L552(lines 551 598) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L858 garLoopResultBuilder]: For program point L581(lines 581 594) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L854 garLoopResultBuilder]: At program point L321(lines 316 324) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:15,340 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:11:15,340 INFO L854 garLoopResultBuilder]: At program point L573(line 573) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L861 garLoopResultBuilder]: At program point L602(lines 541 606) the Hoare annotation is: true [2022-02-20 18:11:15,341 INFO L854 garLoopResultBuilder]: At program point L313(lines 309 315) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point L561(lines 561 567) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point L561-1(lines 561 567) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point L553(lines 553 557) no Hoare annotation was computed. [2022-02-20 18:11:15,341 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:11:15,342 INFO L861 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-02-20 18:11:15,342 INFO L854 garLoopResultBuilder]: At program point L537(lines 525 539) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0)) [2022-02-20 18:11:15,342 INFO L854 garLoopResultBuilder]: At program point L599(lines 550 600) the Hoare annotation is: false [2022-02-20 18:11:15,342 INFO L861 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-02-20 18:11:15,342 INFO L854 garLoopResultBuilder]: At program point L306(lines 302 308) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:15,342 INFO L858 garLoopResultBuilder]: For program point L529(lines 529 535) no Hoare annotation was computed. [2022-02-20 18:11:15,342 INFO L858 garLoopResultBuilder]: For program point L529-1(lines 529 535) no Hoare annotation was computed. [2022-02-20 18:11:15,342 INFO L858 garLoopResultBuilder]: For program point L587(lines 587 593) no Hoare annotation was computed. [2022-02-20 18:11:15,342 INFO L854 garLoopResultBuilder]: At program point L587-2(lines 581 594) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-02-20 18:11:15,343 INFO L858 garLoopResultBuilder]: For program point L571(lines 571 577) no Hoare annotation was computed. [2022-02-20 18:11:15,343 INFO L858 garLoopResultBuilder]: For program point L571-1(lines 571 577) no Hoare annotation was computed. [2022-02-20 18:11:15,343 INFO L854 garLoopResultBuilder]: At program point L596(lines 551 598) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-02-20 18:11:15,343 INFO L854 garLoopResultBuilder]: At program point L563(line 563) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-02-20 18:11:15,343 INFO L854 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:11:15,343 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 364 388) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-02-20 18:11:15,343 INFO L854 garLoopResultBuilder]: At program point L378(line 378) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1) (or .cse0 (not (<= 1 ~waterLevel~0)) .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2022-02-20 18:11:15,344 INFO L854 garLoopResultBuilder]: At program point L502(lines 487 505) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2))) [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L372(lines 372 380) no Hoare annotation was computed. [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L368(lines 368 385) no Hoare annotation was computed. [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L496(lines 496 500) no Hoare annotation was computed. [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L271(lines 271 277) no Hoare annotation was computed. [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L496-2(lines 496 500) no Hoare annotation was computed. [2022-02-20 18:11:15,344 INFO L854 garLoopResultBuilder]: At program point L420(lines 415 422) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-02-20 18:11:15,344 INFO L854 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-02-20 18:11:15,344 INFO L858 garLoopResultBuilder]: For program point L383-1(lines 364 388) no Hoare annotation was computed. [2022-02-20 18:11:15,345 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 364 388) no Hoare annotation was computed. [2022-02-20 18:11:15,345 INFO L854 garLoopResultBuilder]: At program point L276(lines 267 280) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1) (or .cse0 (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) .cse1))) [2022-02-20 18:11:15,345 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 202 213) no Hoare annotation was computed. [2022-02-20 18:11:15,345 INFO L858 garLoopResultBuilder]: For program point L206-1(lines 202 213) no Hoare annotation was computed. [2022-02-20 18:11:15,345 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 202 213) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:15,347 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:15,348 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:11:15,350 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L218-1 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L218-1 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L206-1 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: L206-1 has no Hoare annotation [2022-02-20 18:11:15,351 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L218-1 has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:11:15,352 WARN L170 areAnnotationChecker]: L58-1 has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: L206-1 has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:11:15,353 WARN L170 areAnnotationChecker]: L383-1 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L336-1 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L394 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L394 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L343-1 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L58-1 has no Hoare annotation [2022-02-20 18:11:15,354 WARN L170 areAnnotationChecker]: L271 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L271 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L383-1 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L343-1 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L529-1 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L571-1 has no Hoare annotation [2022-02-20 18:11:15,355 WARN L170 areAnnotationChecker]: L515 has no Hoare annotation [2022-02-20 18:11:15,356 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2022-02-20 18:11:15,356 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:11:15,356 WARN L170 areAnnotationChecker]: L496 has no Hoare annotation [2022-02-20 18:11:15,356 WARN L170 areAnnotationChecker]: L561-1 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L581 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L515 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L515 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L496 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L496 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L571 has no Hoare annotation [2022-02-20 18:11:15,357 WARN L170 areAnnotationChecker]: L571 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L587 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L587 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L515-2 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L496-2 has no Hoare annotation [2022-02-20 18:11:15,358 WARN L170 areAnnotationChecker]: L571-1 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L552 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L529 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L529 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L169 has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:15,360 WARN L170 areAnnotationChecker]: L73 has no Hoare annotation [2022-02-20 18:11:15,361 WARN L170 areAnnotationChecker]: L140-2 has no Hoare annotation [2022-02-20 18:11:15,361 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-02-20 18:11:15,361 WARN L170 areAnnotationChecker]: L552 has no Hoare annotation [2022-02-20 18:11:15,361 WARN L170 areAnnotationChecker]: L552 has no Hoare annotation [2022-02-20 18:11:15,361 WARN L170 areAnnotationChecker]: L529-1 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L398 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L612 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L612 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L140-2 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L73 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L372 has no Hoare annotation [2022-02-20 18:11:15,362 WARN L170 areAnnotationChecker]: L553 has no Hoare annotation [2022-02-20 18:11:15,364 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:15,364 WARN L170 areAnnotationChecker]: L383-1 has no Hoare annotation [2022-02-20 18:11:15,364 WARN L170 areAnnotationChecker]: L383-1 has no Hoare annotation [2022-02-20 18:11:15,364 WARN L170 areAnnotationChecker]: L561 has no Hoare annotation [2022-02-20 18:11:15,365 WARN L170 areAnnotationChecker]: L561 has no Hoare annotation [2022-02-20 18:11:15,365 WARN L170 areAnnotationChecker]: L561-1 has no Hoare annotation [2022-02-20 18:11:15,365 INFO L163 areAnnotationChecker]: CFG has 23 edges. 23 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:11:15,381 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:11:15 BoogieIcfgContainer [2022-02-20 18:11:15,381 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:11:15,381 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:11:15,381 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:11:15,381 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:11:15,382 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:10:57" (3/4) ... [2022-02-20 18:11:15,384 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:15,388 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:11:15,398 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-02-20 18:11:15,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:11:15,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:11:15,399 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:11:15,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:11:15,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:15,400 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:15,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:11:15,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-02-20 18:11:15,415 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-02-20 18:11:15,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || (2 <= waterLevel && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-02-20 18:11:15,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel [2022-02-20 18:11:15,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && (((((((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((((2 <= tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((((2 <= tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) [2022-02-20 18:11:15,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && ((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-02-20 18:11:15,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && ((0 == systemActive || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) || 0 == systemActive) [2022-02-20 18:11:15,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-02-20 18:11:15,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-02-20 18:11:15,430 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:11:15,430 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:11:15,431 INFO L158 Benchmark]: Toolchain (without parser) took 18577.29ms. Allocated memory was 88.1MB in the beginning and 188.7MB in the end (delta: 100.7MB). Free memory was 53.5MB in the beginning and 124.0MB in the end (delta: -70.5MB). Peak memory consumption was 29.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,432 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 88.1MB. Free memory is still 70.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:15,432 INFO L158 Benchmark]: CACSL2BoogieTranslator took 362.19ms. Allocated memory is still 88.1MB. Free memory was 53.3MB in the beginning and 53.7MB in the end (delta: -474.8kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,432 INFO L158 Benchmark]: Boogie Procedure Inliner took 51.75ms. Allocated memory is still 88.1MB. Free memory was 53.7MB in the beginning and 50.9MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,432 INFO L158 Benchmark]: Boogie Preprocessor took 34.45ms. Allocated memory is still 88.1MB. Free memory was 50.9MB in the beginning and 49.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:15,432 INFO L158 Benchmark]: RCFGBuilder took 418.61ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 49.0MB in the beginning and 75.6MB in the end (delta: -26.6MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,433 INFO L158 Benchmark]: TraceAbstraction took 17654.45ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 75.4MB in the beginning and 129.2MB in the end (delta: -53.8MB). Peak memory consumption was 110.9MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,433 INFO L158 Benchmark]: Witness Printer took 49.47ms. Allocated memory is still 188.7MB. Free memory was 129.2MB in the beginning and 124.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:11:15,434 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 88.1MB. Free memory is still 70.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 362.19ms. Allocated memory is still 88.1MB. Free memory was 53.3MB in the beginning and 53.7MB in the end (delta: -474.8kB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 51.75ms. Allocated memory is still 88.1MB. Free memory was 53.7MB in the beginning and 50.9MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.45ms. Allocated memory is still 88.1MB. Free memory was 50.9MB in the beginning and 49.3MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 418.61ms. Allocated memory was 88.1MB in the beginning and 107.0MB in the end (delta: 18.9MB). Free memory was 49.0MB in the beginning and 75.6MB in the end (delta: -26.6MB). Peak memory consumption was 19.2MB. Max. memory is 16.1GB. * TraceAbstraction took 17654.45ms. Allocated memory was 107.0MB in the beginning and 188.7MB in the end (delta: 81.8MB). Free memory was 75.4MB in the beginning and 129.2MB in the end (delta: -53.8MB). Peak memory consumption was 110.9MB. Max. memory is 16.1GB. * Witness Printer took 49.47ms. Allocated memory is still 188.7MB. Free memory was 129.2MB in the beginning and 124.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 612]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.6s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 9.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1582 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1564 mSDsluCounter, 4321 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3040 mSDsCounter, 379 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1973 IncrementalHoareTripleChecker+Invalid, 2352 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 379 mSolverCounterUnsat, 1281 mSDtfsCounter, 1973 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 458 GetRequests, 336 SyntacticMatches, 7 SemanticMatches, 115 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 331 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1483occurred in iteration=11, InterpolantAutomatonStates: 112, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 470 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 2354 PreInvPairs, 2635 NumberOfFragments, 994 HoareAnnotationTreeSize, 2354 FomulaSimplifications, 3657 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 41 FomulaSimplificationsInter, 22721 FormulaSimplificationTreeSizeReductionInter, 1.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 761 NumberOfCodeBlocks, 761 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 822 ConstructedInterpolants, 0 QuantifiedInterpolants, 1568 SizeOfPredicates, 8 NumberOfNonLiveVariables, 921 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 252/282 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 190]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 608]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && !(0 == systemActive))) && (((2 <= waterLevel || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || 1 <= \result) || !(\old(pumpRunning) == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((1 <= \result && pumpRunning == 0) && tmp___0 == 0) && 1 <= tmp) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 415]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 550]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 302]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && tmp == 1) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 258]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || (2 <= waterLevel && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || 1 <= \result) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((2 <= waterLevel && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || !(1 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && ((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && (((((((((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((((2 <= tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((((2 <= tmp && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && 2 <= \result) && !(0 == systemActive))) - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && ((0 == systemActive || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && tmp == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel RESULT: Ultimate proved your program to be correct! [2022-02-20 18:11:15,471 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE