./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:17,902 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:17,904 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:17,936 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:17,936 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:17,937 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:17,938 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:17,939 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:17,940 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:17,941 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:17,941 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:17,943 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:17,943 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:17,947 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:17,949 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:17,950 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:17,951 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:17,953 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:17,954 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:17,960 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:17,961 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:17,961 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:17,962 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:17,964 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:17,965 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:17,968 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:17,968 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:17,969 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:17,969 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:17,970 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:17,970 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:17,971 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:17,972 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:17,972 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:17,973 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:17,974 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:17,974 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:17,975 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:17,975 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:17,975 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:17,976 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:17,976 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:11:17,993 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:17,993 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:17,994 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:17,994 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:17,994 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:17,994 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:17,995 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:17,995 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:17,995 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:17,995 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:17,996 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:17,996 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:11:17,996 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:17,996 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:17,997 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:17,998 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:17,998 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:17,998 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:17,998 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:17,998 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:17,998 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:17,999 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:18,000 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 [2022-02-20 18:11:18,217 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:18,235 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:18,237 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:18,238 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:18,238 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:18,239 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-02-20 18:11:18,284 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/de9122222/0c8024b456ba40b7ae1531f2231122eb/FLAG7ba26a5b9 [2022-02-20 18:11:18,700 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:18,700 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-02-20 18:11:18,715 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/de9122222/0c8024b456ba40b7ae1531f2231122eb/FLAG7ba26a5b9 [2022-02-20 18:11:18,725 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/de9122222/0c8024b456ba40b7ae1531f2231122eb [2022-02-20 18:11:18,728 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:18,730 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:18,731 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:18,731 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:18,734 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:18,739 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:18" (1/1) ... [2022-02-20 18:11:18,741 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@695ca51e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:18, skipping insertion in model container [2022-02-20 18:11:18,741 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:18" (1/1) ... [2022-02-20 18:11:18,746 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:18,782 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:18,927 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-02-20 18:11:19,047 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:19,054 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:19,062 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-02-20 18:11:19,125 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:19,146 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:19,147 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19 WrapperNode [2022-02-20 18:11:19,147 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:19,148 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:19,148 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:19,149 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:19,153 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,176 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,203 INFO L137 Inliner]: procedures = 57, calls = 160, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 289 [2022-02-20 18:11:19,203 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:19,204 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:19,204 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:19,204 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:19,209 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,210 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,217 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,219 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,226 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,232 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,238 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,240 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:19,241 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:19,241 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:19,243 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:19,244 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (1/1) ... [2022-02-20 18:11:19,251 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:19,262 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:19,272 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:19,279 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:19,303 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:19,303 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:11:19,303 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:11:19,303 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:19,303 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:19,304 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:19,304 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:19,304 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:19,304 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:19,305 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:19,305 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:19,305 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:11:19,305 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:11:19,305 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:11:19,305 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:11:19,306 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:11:19,306 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:11:19,307 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:11:19,307 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:19,307 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:19,307 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:19,307 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:19,382 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:19,383 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:19,746 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:19,753 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:19,754 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:19,755 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:19 BoogieIcfgContainer [2022-02-20 18:11:19,755 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:19,757 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:19,757 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:19,760 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:19,760 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:18" (1/3) ... [2022-02-20 18:11:19,760 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5cfd8e10 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:19, skipping insertion in model container [2022-02-20 18:11:19,761 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:19" (2/3) ... [2022-02-20 18:11:19,761 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5cfd8e10 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:19, skipping insertion in model container [2022-02-20 18:11:19,761 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:19" (3/3) ... [2022-02-20 18:11:19,762 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product61.cil.c [2022-02-20 18:11:19,765 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:19,766 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:19,797 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:19,804 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:19,804 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:19,822 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-02-20 18:11:19,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-02-20 18:11:19,826 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:19,827 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:19,827 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:19,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:19,830 INFO L85 PathProgramCache]: Analyzing trace with hash 332135154, now seen corresponding path program 1 times [2022-02-20 18:11:19,836 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:19,837 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [723729295] [2022-02-20 18:11:19,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:19,838 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:19,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:20,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {106#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {106#true} is VALID [2022-02-20 18:11:20,046 INFO L290 TraceCheckUtils]: 1: Hoare triple {106#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {106#true} is VALID [2022-02-20 18:11:20,047 INFO L290 TraceCheckUtils]: 2: Hoare triple {106#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {106#true} is VALID [2022-02-20 18:11:20,047 INFO L290 TraceCheckUtils]: 3: Hoare triple {106#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {106#true} is VALID [2022-02-20 18:11:20,048 INFO L290 TraceCheckUtils]: 4: Hoare triple {106#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {106#true} is VALID [2022-02-20 18:11:20,048 INFO L290 TraceCheckUtils]: 5: Hoare triple {106#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {106#true} is VALID [2022-02-20 18:11:20,048 INFO L290 TraceCheckUtils]: 6: Hoare triple {106#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {106#true} is VALID [2022-02-20 18:11:20,050 INFO L290 TraceCheckUtils]: 7: Hoare triple {106#true} assume !true; {107#false} is VALID [2022-02-20 18:11:20,050 INFO L272 TraceCheckUtils]: 8: Hoare triple {107#false} call cleanup(); {107#false} is VALID [2022-02-20 18:11:20,050 INFO L290 TraceCheckUtils]: 9: Hoare triple {107#false} havoc ~i~0;havoc ~__cil_tmp2~0; {107#false} is VALID [2022-02-20 18:11:20,050 INFO L272 TraceCheckUtils]: 10: Hoare triple {107#false} call timeShift(); {107#false} is VALID [2022-02-20 18:11:20,051 INFO L290 TraceCheckUtils]: 11: Hoare triple {107#false} assume !(0 != ~pumpRunning~0); {107#false} is VALID [2022-02-20 18:11:20,051 INFO L290 TraceCheckUtils]: 12: Hoare triple {107#false} assume !(0 != ~systemActive~0); {107#false} is VALID [2022-02-20 18:11:20,051 INFO L290 TraceCheckUtils]: 13: Hoare triple {107#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {107#false} is VALID [2022-02-20 18:11:20,051 INFO L290 TraceCheckUtils]: 14: Hoare triple {107#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {107#false} is VALID [2022-02-20 18:11:20,052 INFO L290 TraceCheckUtils]: 15: Hoare triple {107#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {107#false} is VALID [2022-02-20 18:11:20,052 INFO L290 TraceCheckUtils]: 16: Hoare triple {107#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {107#false} is VALID [2022-02-20 18:11:20,052 INFO L290 TraceCheckUtils]: 17: Hoare triple {107#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {107#false} is VALID [2022-02-20 18:11:20,052 INFO L290 TraceCheckUtils]: 18: Hoare triple {107#false} assume !false; {107#false} is VALID [2022-02-20 18:11:20,053 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:20,054 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:20,054 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [723729295] [2022-02-20 18:11:20,054 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [723729295] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:20,055 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:20,055 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:20,056 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [820994755] [2022-02-20 18:11:20,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:20,060 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:11:20,062 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:20,064 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,093 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:20,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:20,094 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:20,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:20,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:20,115 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,241 INFO L93 Difference]: Finished difference Result 198 states and 269 transitions. [2022-02-20 18:11:20,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:20,242 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-20 18:11:20,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:20,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2022-02-20 18:11:20,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2022-02-20 18:11:20,262 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 269 transitions. [2022-02-20 18:11:20,448 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:20,467 INFO L225 Difference]: With dead ends: 198 [2022-02-20 18:11:20,467 INFO L226 Difference]: Without dead ends: 94 [2022-02-20 18:11:20,471 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:20,474 INFO L933 BasicCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:20,474 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:20,487 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-02-20 18:11:20,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-02-20 18:11:20,509 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:20,510 INFO L82 GeneralOperation]: Start isEquivalent. First operand 94 states. Second operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-02-20 18:11:20,511 INFO L74 IsIncluded]: Start isIncluded. First operand 94 states. Second operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-02-20 18:11:20,511 INFO L87 Difference]: Start difference. First operand 94 states. Second operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-02-20 18:11:20,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,517 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2022-02-20 18:11:20,517 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-02-20 18:11:20,518 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:20,518 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:20,519 INFO L74 IsIncluded]: Start isIncluded. First operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand 94 states. [2022-02-20 18:11:20,519 INFO L87 Difference]: Start difference. First operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) Second operand 94 states. [2022-02-20 18:11:20,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,523 INFO L93 Difference]: Finished difference Result 94 states and 122 transitions. [2022-02-20 18:11:20,523 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-02-20 18:11:20,525 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:20,525 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:20,525 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:20,525 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:20,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-02-20 18:11:20,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-02-20 18:11:20,530 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 19 [2022-02-20 18:11:20,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:20,530 INFO L470 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-02-20 18:11:20,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,530 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-02-20 18:11:20,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-02-20 18:11:20,531 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:20,531 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:20,531 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:11:20,531 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:20,532 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:20,532 INFO L85 PathProgramCache]: Analyzing trace with hash 2057254746, now seen corresponding path program 1 times [2022-02-20 18:11:20,532 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:20,532 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1910127880] [2022-02-20 18:11:20,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:20,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:20,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:20,568 INFO L290 TraceCheckUtils]: 0: Hoare triple {724#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {724#true} is VALID [2022-02-20 18:11:20,568 INFO L290 TraceCheckUtils]: 1: Hoare triple {724#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {724#true} is VALID [2022-02-20 18:11:20,568 INFO L290 TraceCheckUtils]: 2: Hoare triple {724#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {724#true} is VALID [2022-02-20 18:11:20,568 INFO L290 TraceCheckUtils]: 3: Hoare triple {724#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {724#true} is VALID [2022-02-20 18:11:20,569 INFO L290 TraceCheckUtils]: 4: Hoare triple {724#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {724#true} is VALID [2022-02-20 18:11:20,569 INFO L290 TraceCheckUtils]: 5: Hoare triple {724#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {724#true} is VALID [2022-02-20 18:11:20,569 INFO L290 TraceCheckUtils]: 6: Hoare triple {724#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {726#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:20,570 INFO L290 TraceCheckUtils]: 7: Hoare triple {726#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {726#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:20,570 INFO L290 TraceCheckUtils]: 8: Hoare triple {726#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {725#false} is VALID [2022-02-20 18:11:20,570 INFO L272 TraceCheckUtils]: 9: Hoare triple {725#false} call cleanup(); {725#false} is VALID [2022-02-20 18:11:20,570 INFO L290 TraceCheckUtils]: 10: Hoare triple {725#false} havoc ~i~0;havoc ~__cil_tmp2~0; {725#false} is VALID [2022-02-20 18:11:20,570 INFO L272 TraceCheckUtils]: 11: Hoare triple {725#false} call timeShift(); {725#false} is VALID [2022-02-20 18:11:20,570 INFO L290 TraceCheckUtils]: 12: Hoare triple {725#false} assume !(0 != ~pumpRunning~0); {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 13: Hoare triple {725#false} assume !(0 != ~systemActive~0); {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 14: Hoare triple {725#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 15: Hoare triple {725#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 16: Hoare triple {725#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 17: Hoare triple {725#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 18: Hoare triple {725#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {725#false} is VALID [2022-02-20 18:11:20,571 INFO L290 TraceCheckUtils]: 19: Hoare triple {725#false} assume !false; {725#false} is VALID [2022-02-20 18:11:20,572 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:20,572 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:20,572 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1910127880] [2022-02-20 18:11:20,572 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1910127880] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:20,572 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:20,572 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:20,573 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852989815] [2022-02-20 18:11:20,573 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:20,574 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:11:20,574 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:20,574 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,588 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 20 edges. 20 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:20,588 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:20,588 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:20,589 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:20,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:20,589 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,673 INFO L93 Difference]: Finished difference Result 154 states and 200 transitions. [2022-02-20 18:11:20,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:20,673 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-02-20 18:11:20,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:20,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 200 transitions. [2022-02-20 18:11:20,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 200 transitions. [2022-02-20 18:11:20,680 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 200 transitions. [2022-02-20 18:11:20,816 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 200 edges. 200 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:20,818 INFO L225 Difference]: With dead ends: 154 [2022-02-20 18:11:20,819 INFO L226 Difference]: Without dead ends: 85 [2022-02-20 18:11:20,819 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:20,820 INFO L933 BasicCegarLoop]: 109 mSDtfsCounter, 12 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:20,820 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 202 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:20,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-02-20 18:11:20,825 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-02-20 18:11:20,825 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:20,826 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:20,826 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:20,827 INFO L87 Difference]: Start difference. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:20,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,829 INFO L93 Difference]: Finished difference Result 85 states and 110 transitions. [2022-02-20 18:11:20,830 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:11:20,830 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:20,830 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:20,831 INFO L74 IsIncluded]: Start isIncluded. First operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:11:20,831 INFO L87 Difference]: Start difference. First operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:11:20,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:20,834 INFO L93 Difference]: Finished difference Result 85 states and 110 transitions. [2022-02-20 18:11:20,834 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:11:20,835 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:20,835 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:20,835 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:20,835 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:20,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:20,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-02-20 18:11:20,839 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 20 [2022-02-20 18:11:20,839 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:20,840 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-02-20 18:11:20,840 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,840 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-02-20 18:11:20,841 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-02-20 18:11:20,841 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:20,841 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:20,842 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:11:20,842 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:20,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:20,843 INFO L85 PathProgramCache]: Analyzing trace with hash 1387625524, now seen corresponding path program 1 times [2022-02-20 18:11:20,843 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:20,843 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [559578129] [2022-02-20 18:11:20,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:20,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:20,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:20,901 INFO L290 TraceCheckUtils]: 0: Hoare triple {1247#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,902 INFO L290 TraceCheckUtils]: 1: Hoare triple {1249#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,904 INFO L290 TraceCheckUtils]: 2: Hoare triple {1249#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,904 INFO L290 TraceCheckUtils]: 3: Hoare triple {1249#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,905 INFO L290 TraceCheckUtils]: 4: Hoare triple {1249#(= 1 ~systemActive~0)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,905 INFO L290 TraceCheckUtils]: 5: Hoare triple {1249#(= 1 ~systemActive~0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,905 INFO L290 TraceCheckUtils]: 6: Hoare triple {1249#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,906 INFO L290 TraceCheckUtils]: 7: Hoare triple {1249#(= 1 ~systemActive~0)} assume !false; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,906 INFO L290 TraceCheckUtils]: 8: Hoare triple {1249#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,908 INFO L290 TraceCheckUtils]: 9: Hoare triple {1249#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,908 INFO L290 TraceCheckUtils]: 10: Hoare triple {1249#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~6#1); {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,909 INFO L290 TraceCheckUtils]: 11: Hoare triple {1249#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,909 INFO L290 TraceCheckUtils]: 12: Hoare triple {1249#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,912 INFO L290 TraceCheckUtils]: 13: Hoare triple {1249#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,913 INFO L290 TraceCheckUtils]: 14: Hoare triple {1249#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,913 INFO L272 TraceCheckUtils]: 15: Hoare triple {1249#(= 1 ~systemActive~0)} call timeShift(); {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,914 INFO L290 TraceCheckUtils]: 16: Hoare triple {1249#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1249#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:20,914 INFO L290 TraceCheckUtils]: 17: Hoare triple {1249#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1248#false} is VALID [2022-02-20 18:11:20,914 INFO L290 TraceCheckUtils]: 18: Hoare triple {1248#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {1248#false} is VALID [2022-02-20 18:11:20,914 INFO L290 TraceCheckUtils]: 19: Hoare triple {1248#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {1248#false} is VALID [2022-02-20 18:11:20,915 INFO L290 TraceCheckUtils]: 20: Hoare triple {1248#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {1248#false} is VALID [2022-02-20 18:11:20,915 INFO L290 TraceCheckUtils]: 21: Hoare triple {1248#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {1248#false} is VALID [2022-02-20 18:11:20,915 INFO L290 TraceCheckUtils]: 22: Hoare triple {1248#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {1248#false} is VALID [2022-02-20 18:11:20,915 INFO L290 TraceCheckUtils]: 23: Hoare triple {1248#false} assume !false; {1248#false} is VALID [2022-02-20 18:11:20,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:20,916 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:20,917 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [559578129] [2022-02-20 18:11:20,917 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [559578129] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:20,917 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:20,917 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:20,918 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [679204811] [2022-02-20 18:11:20,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:20,918 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-02-20 18:11:20,919 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:20,919 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:20,936 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:20,936 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:20,936 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:20,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:20,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:20,937 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:21,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,043 INFO L93 Difference]: Finished difference Result 163 states and 214 transitions. [2022-02-20 18:11:21,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:21,043 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-02-20 18:11:21,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:21,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:21,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 214 transitions. [2022-02-20 18:11:21,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:21,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 214 transitions. [2022-02-20 18:11:21,049 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 214 transitions. [2022-02-20 18:11:21,251 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 214 edges. 214 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:21,253 INFO L225 Difference]: With dead ends: 163 [2022-02-20 18:11:21,254 INFO L226 Difference]: Without dead ends: 85 [2022-02-20 18:11:21,254 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:21,255 INFO L933 BasicCegarLoop]: 108 mSDtfsCounter, 92 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:21,256 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [92 Valid, 108 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:21,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-02-20 18:11:21,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-02-20 18:11:21,260 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:21,261 INFO L82 GeneralOperation]: Start isEquivalent. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:21,261 INFO L74 IsIncluded]: Start isIncluded. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:21,261 INFO L87 Difference]: Start difference. First operand 85 states. Second operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:21,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,264 INFO L93 Difference]: Finished difference Result 85 states and 109 transitions. [2022-02-20 18:11:21,264 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-02-20 18:11:21,264 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:21,264 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:21,264 INFO L74 IsIncluded]: Start isIncluded. First operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:11:21,265 INFO L87 Difference]: Start difference. First operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) Second operand 85 states. [2022-02-20 18:11:21,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,267 INFO L93 Difference]: Finished difference Result 85 states and 109 transitions. [2022-02-20 18:11:21,267 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-02-20 18:11:21,267 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:21,267 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:21,267 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:21,267 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:21,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:21,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-02-20 18:11:21,270 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 24 [2022-02-20 18:11:21,270 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:21,270 INFO L470 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-02-20 18:11:21,270 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:21,270 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-02-20 18:11:21,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-02-20 18:11:21,271 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:21,271 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:21,271 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:11:21,271 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:21,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:21,272 INFO L85 PathProgramCache]: Analyzing trace with hash 610675451, now seen corresponding path program 1 times [2022-02-20 18:11:21,272 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:21,272 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [89833352] [2022-02-20 18:11:21,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:21,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:21,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:21,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,318 INFO L290 TraceCheckUtils]: 0: Hoare triple {1780#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {1780#true} is VALID [2022-02-20 18:11:21,319 INFO L290 TraceCheckUtils]: 1: Hoare triple {1780#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {1780#true} is VALID [2022-02-20 18:11:21,319 INFO L290 TraceCheckUtils]: 2: Hoare triple {1780#true} assume true; {1780#true} is VALID [2022-02-20 18:11:21,319 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {1780#true} {1781#false} #262#return; {1781#false} is VALID [2022-02-20 18:11:21,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-02-20 18:11:21,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,324 INFO L290 TraceCheckUtils]: 0: Hoare triple {1790#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {1780#true} is VALID [2022-02-20 18:11:21,324 INFO L290 TraceCheckUtils]: 1: Hoare triple {1780#true} assume true; {1780#true} is VALID [2022-02-20 18:11:21,325 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1780#true} {1781#false} #264#return; {1781#false} is VALID [2022-02-20 18:11:21,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {1780#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {1782#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,326 INFO L290 TraceCheckUtils]: 2: Hoare triple {1782#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,326 INFO L290 TraceCheckUtils]: 3: Hoare triple {1782#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,326 INFO L290 TraceCheckUtils]: 4: Hoare triple {1782#(= ~pumpRunning~0 0)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,327 INFO L290 TraceCheckUtils]: 5: Hoare triple {1782#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,327 INFO L290 TraceCheckUtils]: 6: Hoare triple {1782#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,327 INFO L290 TraceCheckUtils]: 7: Hoare triple {1782#(= ~pumpRunning~0 0)} assume !false; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,328 INFO L290 TraceCheckUtils]: 8: Hoare triple {1782#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,328 INFO L290 TraceCheckUtils]: 9: Hoare triple {1782#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,328 INFO L290 TraceCheckUtils]: 10: Hoare triple {1782#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~6#1); {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,329 INFO L290 TraceCheckUtils]: 11: Hoare triple {1782#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,329 INFO L290 TraceCheckUtils]: 12: Hoare triple {1782#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,329 INFO L290 TraceCheckUtils]: 13: Hoare triple {1782#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,329 INFO L290 TraceCheckUtils]: 14: Hoare triple {1782#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,330 INFO L272 TraceCheckUtils]: 15: Hoare triple {1782#(= ~pumpRunning~0 0)} call timeShift(); {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,330 INFO L290 TraceCheckUtils]: 16: Hoare triple {1782#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,331 INFO L290 TraceCheckUtils]: 17: Hoare triple {1782#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {1782#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:21,331 INFO L290 TraceCheckUtils]: 18: Hoare triple {1782#(= ~pumpRunning~0 0)} assume 0 != ~pumpRunning~0; {1781#false} is VALID [2022-02-20 18:11:21,331 INFO L272 TraceCheckUtils]: 19: Hoare triple {1781#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {1780#true} is VALID [2022-02-20 18:11:21,331 INFO L290 TraceCheckUtils]: 20: Hoare triple {1780#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {1780#true} is VALID [2022-02-20 18:11:21,331 INFO L290 TraceCheckUtils]: 21: Hoare triple {1780#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {1780#true} is VALID [2022-02-20 18:11:21,331 INFO L290 TraceCheckUtils]: 22: Hoare triple {1780#true} assume true; {1780#true} is VALID [2022-02-20 18:11:21,331 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {1780#true} {1781#false} #262#return; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 24: Hoare triple {1781#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 25: Hoare triple {1781#false} assume 0 != processEnvironment_~tmp~2#1; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L272 TraceCheckUtils]: 26: Hoare triple {1781#false} call deactivatePump(); {1790#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 27: Hoare triple {1790#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {1780#true} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 28: Hoare triple {1780#true} assume true; {1780#true} is VALID [2022-02-20 18:11:21,332 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {1780#true} {1781#false} #264#return; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 30: Hoare triple {1781#false} assume { :end_inline_processEnvironment } true; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 31: Hoare triple {1781#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {1781#false} is VALID [2022-02-20 18:11:21,332 INFO L290 TraceCheckUtils]: 32: Hoare triple {1781#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {1781#false} is VALID [2022-02-20 18:11:21,333 INFO L290 TraceCheckUtils]: 33: Hoare triple {1781#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {1781#false} is VALID [2022-02-20 18:11:21,333 INFO L290 TraceCheckUtils]: 34: Hoare triple {1781#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {1781#false} is VALID [2022-02-20 18:11:21,333 INFO L290 TraceCheckUtils]: 35: Hoare triple {1781#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {1781#false} is VALID [2022-02-20 18:11:21,333 INFO L290 TraceCheckUtils]: 36: Hoare triple {1781#false} assume !false; {1781#false} is VALID [2022-02-20 18:11:21,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:21,333 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:21,334 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [89833352] [2022-02-20 18:11:21,334 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [89833352] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:21,334 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:21,334 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:11:21,334 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2083669985] [2022-02-20 18:11:21,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:21,334 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 37 [2022-02-20 18:11:21,335 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:21,335 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:21,357 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:21,357 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:11:21,357 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:21,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:11:21,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:11:21,358 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:21,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,629 INFO L93 Difference]: Finished difference Result 238 states and 306 transitions. [2022-02-20 18:11:21,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:11:21,630 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 37 [2022-02-20 18:11:21,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:21,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:21,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 306 transitions. [2022-02-20 18:11:21,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:21,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 306 transitions. [2022-02-20 18:11:21,639 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 306 transitions. [2022-02-20 18:11:21,853 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 306 edges. 306 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:21,856 INFO L225 Difference]: With dead ends: 238 [2022-02-20 18:11:21,856 INFO L226 Difference]: Without dead ends: 160 [2022-02-20 18:11:21,857 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:21,858 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 153 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 72 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 72 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:21,858 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [157 Valid, 200 Invalid, 113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 72 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:21,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-02-20 18:11:21,865 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 154. [2022-02-20 18:11:21,866 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:21,866 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-02-20 18:11:21,866 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-02-20 18:11:21,867 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-02-20 18:11:21,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,871 INFO L93 Difference]: Finished difference Result 160 states and 195 transitions. [2022-02-20 18:11:21,871 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 195 transitions. [2022-02-20 18:11:21,871 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:21,871 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:21,872 INFO L74 IsIncluded]: Start isIncluded. First operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) Second operand 160 states. [2022-02-20 18:11:21,873 INFO L87 Difference]: Start difference. First operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) Second operand 160 states. [2022-02-20 18:11:21,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:21,876 INFO L93 Difference]: Finished difference Result 160 states and 195 transitions. [2022-02-20 18:11:21,876 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 195 transitions. [2022-02-20 18:11:21,877 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:21,877 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:21,877 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:21,877 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:21,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-02-20 18:11:21,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 192 transitions. [2022-02-20 18:11:21,881 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 192 transitions. Word has length 37 [2022-02-20 18:11:21,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:21,881 INFO L470 AbstractCegarLoop]: Abstraction has 154 states and 192 transitions. [2022-02-20 18:11:21,881 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:21,881 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 192 transitions. [2022-02-20 18:11:21,882 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-02-20 18:11:21,882 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:21,882 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:21,882 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:11:21,882 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:21,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:21,883 INFO L85 PathProgramCache]: Analyzing trace with hash -1599675381, now seen corresponding path program 1 times [2022-02-20 18:11:21,883 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:21,883 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [957631958] [2022-02-20 18:11:21,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:21,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:21,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:21,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:21,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:21,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:21,960 INFO L290 TraceCheckUtils]: 0: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,960 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {2668#true} {2668#true} #280#return; {2668#true} is VALID [2022-02-20 18:11:21,961 INFO L290 TraceCheckUtils]: 0: Hoare triple {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {2668#true} is VALID [2022-02-20 18:11:21,961 INFO L290 TraceCheckUtils]: 1: Hoare triple {2668#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,961 INFO L290 TraceCheckUtils]: 2: Hoare triple {2668#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,961 INFO L290 TraceCheckUtils]: 3: Hoare triple {2668#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {2668#true} is VALID [2022-02-20 18:11:21,961 INFO L290 TraceCheckUtils]: 4: Hoare triple {2668#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2668#true} is VALID [2022-02-20 18:11:21,962 INFO L290 TraceCheckUtils]: 5: Hoare triple {2668#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {2668#true} is VALID [2022-02-20 18:11:21,962 INFO L290 TraceCheckUtils]: 6: Hoare triple {2668#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {2668#true} is VALID [2022-02-20 18:11:21,963 INFO L290 TraceCheckUtils]: 7: Hoare triple {2668#true} assume !(0 != ~tmp~0#1); {2668#true} is VALID [2022-02-20 18:11:21,963 INFO L272 TraceCheckUtils]: 8: Hoare triple {2668#true} call processEnvironment__wrappee__base(); {2668#true} is VALID [2022-02-20 18:11:21,964 INFO L290 TraceCheckUtils]: 9: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,964 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2668#true} {2668#true} #280#return; {2668#true} is VALID [2022-02-20 18:11:21,970 INFO L290 TraceCheckUtils]: 11: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,971 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {2668#true} {2668#true} #288#return; {2668#true} is VALID [2022-02-20 18:11:21,971 INFO L290 TraceCheckUtils]: 0: Hoare triple {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {2668#true} is VALID [2022-02-20 18:11:21,971 INFO L290 TraceCheckUtils]: 1: Hoare triple {2668#true} assume !(0 != ~pumpRunning~0); {2668#true} is VALID [2022-02-20 18:11:21,972 INFO L272 TraceCheckUtils]: 2: Hoare triple {2668#true} call processEnvironment__wrappee__highWaterSensor(); {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:21,972 INFO L290 TraceCheckUtils]: 3: Hoare triple {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {2668#true} is VALID [2022-02-20 18:11:21,972 INFO L290 TraceCheckUtils]: 4: Hoare triple {2668#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,972 INFO L290 TraceCheckUtils]: 5: Hoare triple {2668#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,972 INFO L290 TraceCheckUtils]: 6: Hoare triple {2668#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L290 TraceCheckUtils]: 7: Hoare triple {2668#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L290 TraceCheckUtils]: 8: Hoare triple {2668#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L290 TraceCheckUtils]: 9: Hoare triple {2668#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L290 TraceCheckUtils]: 10: Hoare triple {2668#true} assume !(0 != ~tmp~0#1); {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L272 TraceCheckUtils]: 11: Hoare triple {2668#true} call processEnvironment__wrappee__base(); {2668#true} is VALID [2022-02-20 18:11:21,973 INFO L290 TraceCheckUtils]: 12: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,974 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {2668#true} {2668#true} #280#return; {2668#true} is VALID [2022-02-20 18:11:21,974 INFO L290 TraceCheckUtils]: 14: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,974 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {2668#true} {2668#true} #288#return; {2668#true} is VALID [2022-02-20 18:11:21,974 INFO L290 TraceCheckUtils]: 16: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,974 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {2668#true} {2671#(not (= ~waterLevel~0 0))} #268#return; {2671#(not (= ~waterLevel~0 0))} is VALID [2022-02-20 18:11:21,976 INFO L290 TraceCheckUtils]: 0: Hoare triple {2668#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,977 INFO L290 TraceCheckUtils]: 1: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,977 INFO L290 TraceCheckUtils]: 2: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,977 INFO L290 TraceCheckUtils]: 3: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,978 INFO L290 TraceCheckUtils]: 4: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,978 INFO L290 TraceCheckUtils]: 5: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,978 INFO L290 TraceCheckUtils]: 6: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,978 INFO L290 TraceCheckUtils]: 7: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume !false; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,979 INFO L290 TraceCheckUtils]: 8: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,982 INFO L290 TraceCheckUtils]: 9: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,982 INFO L290 TraceCheckUtils]: 10: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume !(0 != test_~tmp~6#1); {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,982 INFO L290 TraceCheckUtils]: 11: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,983 INFO L290 TraceCheckUtils]: 12: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,983 INFO L290 TraceCheckUtils]: 13: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,983 INFO L290 TraceCheckUtils]: 14: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,984 INFO L272 TraceCheckUtils]: 15: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} call timeShift(); {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,984 INFO L290 TraceCheckUtils]: 16: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {2670#(= ~waterLevel~0 ~systemActive~0)} is VALID [2022-02-20 18:11:21,984 INFO L290 TraceCheckUtils]: 17: Hoare triple {2670#(= ~waterLevel~0 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {2671#(not (= ~waterLevel~0 0))} is VALID [2022-02-20 18:11:21,985 INFO L290 TraceCheckUtils]: 18: Hoare triple {2671#(not (= ~waterLevel~0 0))} assume !(0 != ~pumpRunning~0); {2671#(not (= ~waterLevel~0 0))} is VALID [2022-02-20 18:11:21,985 INFO L272 TraceCheckUtils]: 19: Hoare triple {2671#(not (= ~waterLevel~0 0))} call processEnvironment__wrappee__methaneQuery(); {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:21,985 INFO L290 TraceCheckUtils]: 20: Hoare triple {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {2668#true} is VALID [2022-02-20 18:11:21,985 INFO L290 TraceCheckUtils]: 21: Hoare triple {2668#true} assume !(0 != ~pumpRunning~0); {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L272 TraceCheckUtils]: 22: Hoare triple {2668#true} call processEnvironment__wrappee__highWaterSensor(); {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 23: Hoare triple {2692#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 24: Hoare triple {2668#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 25: Hoare triple {2668#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 26: Hoare triple {2668#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 27: Hoare triple {2668#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 28: Hoare triple {2668#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 29: Hoare triple {2668#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 30: Hoare triple {2668#true} assume !(0 != ~tmp~0#1); {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L272 TraceCheckUtils]: 31: Hoare triple {2668#true} call processEnvironment__wrappee__base(); {2668#true} is VALID [2022-02-20 18:11:21,986 INFO L290 TraceCheckUtils]: 32: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,987 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {2668#true} {2668#true} #280#return; {2668#true} is VALID [2022-02-20 18:11:21,987 INFO L290 TraceCheckUtils]: 34: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,987 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {2668#true} {2668#true} #288#return; {2668#true} is VALID [2022-02-20 18:11:21,987 INFO L290 TraceCheckUtils]: 36: Hoare triple {2668#true} assume true; {2668#true} is VALID [2022-02-20 18:11:21,987 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {2668#true} {2671#(not (= ~waterLevel~0 0))} #268#return; {2671#(not (= ~waterLevel~0 0))} is VALID [2022-02-20 18:11:21,987 INFO L290 TraceCheckUtils]: 38: Hoare triple {2671#(not (= ~waterLevel~0 0))} assume { :end_inline_processEnvironment } true; {2671#(not (= ~waterLevel~0 0))} is VALID [2022-02-20 18:11:21,988 INFO L290 TraceCheckUtils]: 39: Hoare triple {2671#(not (= ~waterLevel~0 0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {2690#(not (= |timeShift_getWaterLevel_#res#1| 0))} is VALID [2022-02-20 18:11:21,988 INFO L290 TraceCheckUtils]: 40: Hoare triple {2690#(not (= |timeShift_getWaterLevel_#res#1| 0))} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {2691#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0))} is VALID [2022-02-20 18:11:21,988 INFO L290 TraceCheckUtils]: 41: Hoare triple {2691#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {2669#false} is VALID [2022-02-20 18:11:21,989 INFO L290 TraceCheckUtils]: 42: Hoare triple {2669#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {2669#false} is VALID [2022-02-20 18:11:21,989 INFO L290 TraceCheckUtils]: 43: Hoare triple {2669#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {2669#false} is VALID [2022-02-20 18:11:21,989 INFO L290 TraceCheckUtils]: 44: Hoare triple {2669#false} assume !false; {2669#false} is VALID [2022-02-20 18:11:21,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:21,989 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:21,989 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [957631958] [2022-02-20 18:11:21,989 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [957631958] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:21,989 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:21,989 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:21,990 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1667217945] [2022-02-20 18:11:21,990 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:21,990 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-02-20 18:11:21,990 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:21,990 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:11:22,015 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:22,016 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:22,016 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:22,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:22,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:22,017 INFO L87 Difference]: Start difference. First operand 154 states and 192 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:11:23,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:23,101 INFO L93 Difference]: Finished difference Result 589 states and 788 transitions. [2022-02-20 18:11:23,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-02-20 18:11:23,101 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-02-20 18:11:23,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:23,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:11:23,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 488 transitions. [2022-02-20 18:11:23,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:11:23,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 488 transitions. [2022-02-20 18:11:23,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 17 states and 488 transitions. [2022-02-20 18:11:23,473 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 488 edges. 488 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:23,488 INFO L225 Difference]: With dead ends: 589 [2022-02-20 18:11:23,488 INFO L226 Difference]: Without dead ends: 442 [2022-02-20 18:11:23,489 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=105, Invalid=237, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:23,490 INFO L933 BasicCegarLoop]: 111 mSDtfsCounter, 358 mSDsluCounter, 407 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 363 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 493 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:23,490 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [363 Valid, 518 Invalid, 493 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-02-20 18:11:23,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 442 states. [2022-02-20 18:11:23,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 442 to 424. [2022-02-20 18:11:23,520 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:23,522 INFO L82 GeneralOperation]: Start isEquivalent. First operand 442 states. Second operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) [2022-02-20 18:11:23,523 INFO L74 IsIncluded]: Start isIncluded. First operand 442 states. Second operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) [2022-02-20 18:11:23,524 INFO L87 Difference]: Start difference. First operand 442 states. Second operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) [2022-02-20 18:11:23,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:23,542 INFO L93 Difference]: Finished difference Result 442 states and 579 transitions. [2022-02-20 18:11:23,542 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 579 transitions. [2022-02-20 18:11:23,543 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:23,543 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:23,545 INFO L74 IsIncluded]: Start isIncluded. First operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) Second operand 442 states. [2022-02-20 18:11:23,546 INFO L87 Difference]: Start difference. First operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) Second operand 442 states. [2022-02-20 18:11:23,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:23,564 INFO L93 Difference]: Finished difference Result 442 states and 579 transitions. [2022-02-20 18:11:23,564 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 579 transitions. [2022-02-20 18:11:23,565 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:23,565 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:23,565 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:23,566 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:23,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) [2022-02-20 18:11:23,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 424 states to 424 states and 546 transitions. [2022-02-20 18:11:23,589 INFO L78 Accepts]: Start accepts. Automaton has 424 states and 546 transitions. Word has length 45 [2022-02-20 18:11:23,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:23,591 INFO L470 AbstractCegarLoop]: Abstraction has 424 states and 546 transitions. [2022-02-20 18:11:23,591 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:11:23,591 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 546 transitions. [2022-02-20 18:11:23,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-20 18:11:23,592 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:23,592 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:23,592 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:11:23,592 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:23,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:23,593 INFO L85 PathProgramCache]: Analyzing trace with hash 414561125, now seen corresponding path program 1 times [2022-02-20 18:11:23,593 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:23,593 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038292652] [2022-02-20 18:11:23,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:23,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:23,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:23,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:23,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:23,680 INFO L290 TraceCheckUtils]: 0: Hoare triple {5065#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {5039#true} is VALID [2022-02-20 18:11:23,680 INFO L290 TraceCheckUtils]: 1: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,681 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #270#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:23,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:23,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:23,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:23,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:23,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:23,704 INFO L290 TraceCheckUtils]: 0: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,704 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #280#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,704 INFO L290 TraceCheckUtils]: 0: Hoare triple {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {5039#true} is VALID [2022-02-20 18:11:23,705 INFO L290 TraceCheckUtils]: 1: Hoare triple {5039#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,705 INFO L290 TraceCheckUtils]: 2: Hoare triple {5041#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,705 INFO L290 TraceCheckUtils]: 3: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,706 INFO L290 TraceCheckUtils]: 4: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,706 INFO L290 TraceCheckUtils]: 5: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,706 INFO L290 TraceCheckUtils]: 6: Hoare triple {5041#(= ~pumpRunning~0 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,706 INFO L290 TraceCheckUtils]: 7: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~0#1); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,707 INFO L272 TraceCheckUtils]: 8: Hoare triple {5041#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {5039#true} is VALID [2022-02-20 18:11:23,707 INFO L290 TraceCheckUtils]: 9: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,707 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #280#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,710 INFO L290 TraceCheckUtils]: 11: Hoare triple {5041#(= ~pumpRunning~0 0)} assume true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,710 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5041#(= ~pumpRunning~0 0)} {5039#true} #288#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,710 INFO L290 TraceCheckUtils]: 0: Hoare triple {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {5039#true} is VALID [2022-02-20 18:11:23,710 INFO L290 TraceCheckUtils]: 1: Hoare triple {5039#true} assume !(0 != ~pumpRunning~0); {5039#true} is VALID [2022-02-20 18:11:23,711 INFO L272 TraceCheckUtils]: 2: Hoare triple {5039#true} call processEnvironment__wrappee__highWaterSensor(); {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:23,711 INFO L290 TraceCheckUtils]: 3: Hoare triple {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {5039#true} is VALID [2022-02-20 18:11:23,711 INFO L290 TraceCheckUtils]: 4: Hoare triple {5039#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,711 INFO L290 TraceCheckUtils]: 5: Hoare triple {5041#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,712 INFO L290 TraceCheckUtils]: 6: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,712 INFO L290 TraceCheckUtils]: 7: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,712 INFO L290 TraceCheckUtils]: 8: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,712 INFO L290 TraceCheckUtils]: 9: Hoare triple {5041#(= ~pumpRunning~0 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,713 INFO L290 TraceCheckUtils]: 10: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~0#1); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,713 INFO L272 TraceCheckUtils]: 11: Hoare triple {5041#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {5039#true} is VALID [2022-02-20 18:11:23,713 INFO L290 TraceCheckUtils]: 12: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,713 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #280#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,714 INFO L290 TraceCheckUtils]: 14: Hoare triple {5041#(= ~pumpRunning~0 0)} assume true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,714 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {5041#(= ~pumpRunning~0 0)} {5039#true} #288#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,714 INFO L290 TraceCheckUtils]: 16: Hoare triple {5041#(= ~pumpRunning~0 0)} assume true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,714 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {5041#(= ~pumpRunning~0 0)} {5041#(= ~pumpRunning~0 0)} #268#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,715 INFO L290 TraceCheckUtils]: 0: Hoare triple {5039#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,715 INFO L290 TraceCheckUtils]: 1: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,715 INFO L290 TraceCheckUtils]: 2: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,716 INFO L290 TraceCheckUtils]: 3: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,716 INFO L290 TraceCheckUtils]: 4: Hoare triple {5041#(= ~pumpRunning~0 0)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,716 INFO L290 TraceCheckUtils]: 5: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,716 INFO L290 TraceCheckUtils]: 6: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,717 INFO L290 TraceCheckUtils]: 7: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !false; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,717 INFO L290 TraceCheckUtils]: 8: Hoare triple {5041#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,717 INFO L290 TraceCheckUtils]: 9: Hoare triple {5041#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,718 INFO L290 TraceCheckUtils]: 10: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != test_~tmp~6#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,718 INFO L272 TraceCheckUtils]: 11: Hoare triple {5041#(= ~pumpRunning~0 0)} call waterRise(); {5065#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:23,718 INFO L290 TraceCheckUtils]: 12: Hoare triple {5065#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {5039#true} is VALID [2022-02-20 18:11:23,718 INFO L290 TraceCheckUtils]: 13: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,719 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #270#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,719 INFO L290 TraceCheckUtils]: 15: Hoare triple {5041#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,719 INFO L290 TraceCheckUtils]: 16: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,719 INFO L290 TraceCheckUtils]: 17: Hoare triple {5041#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,720 INFO L290 TraceCheckUtils]: 18: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,720 INFO L272 TraceCheckUtils]: 19: Hoare triple {5041#(= ~pumpRunning~0 0)} call timeShift(); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,720 INFO L290 TraceCheckUtils]: 20: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,724 INFO L290 TraceCheckUtils]: 21: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,725 INFO L290 TraceCheckUtils]: 22: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,725 INFO L272 TraceCheckUtils]: 23: Hoare triple {5041#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__methaneQuery(); {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:23,726 INFO L290 TraceCheckUtils]: 24: Hoare triple {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {5039#true} is VALID [2022-02-20 18:11:23,726 INFO L290 TraceCheckUtils]: 25: Hoare triple {5039#true} assume !(0 != ~pumpRunning~0); {5039#true} is VALID [2022-02-20 18:11:23,727 INFO L272 TraceCheckUtils]: 26: Hoare triple {5039#true} call processEnvironment__wrappee__highWaterSensor(); {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:23,727 INFO L290 TraceCheckUtils]: 27: Hoare triple {5066#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {5039#true} is VALID [2022-02-20 18:11:23,728 INFO L290 TraceCheckUtils]: 28: Hoare triple {5039#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,729 INFO L290 TraceCheckUtils]: 29: Hoare triple {5041#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,729 INFO L290 TraceCheckUtils]: 30: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,729 INFO L290 TraceCheckUtils]: 31: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,730 INFO L290 TraceCheckUtils]: 32: Hoare triple {5041#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,730 INFO L290 TraceCheckUtils]: 33: Hoare triple {5041#(= ~pumpRunning~0 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,732 INFO L290 TraceCheckUtils]: 34: Hoare triple {5041#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~0#1); {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,732 INFO L272 TraceCheckUtils]: 35: Hoare triple {5041#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {5039#true} is VALID [2022-02-20 18:11:23,732 INFO L290 TraceCheckUtils]: 36: Hoare triple {5039#true} assume true; {5039#true} is VALID [2022-02-20 18:11:23,733 INFO L284 TraceCheckUtils]: 37: Hoare quadruple {5039#true} {5041#(= ~pumpRunning~0 0)} #280#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,733 INFO L290 TraceCheckUtils]: 38: Hoare triple {5041#(= ~pumpRunning~0 0)} assume true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,734 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {5041#(= ~pumpRunning~0 0)} {5039#true} #288#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,734 INFO L290 TraceCheckUtils]: 40: Hoare triple {5041#(= ~pumpRunning~0 0)} assume true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,734 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {5041#(= ~pumpRunning~0 0)} {5041#(= ~pumpRunning~0 0)} #268#return; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,735 INFO L290 TraceCheckUtils]: 42: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,735 INFO L290 TraceCheckUtils]: 43: Hoare triple {5041#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,735 INFO L290 TraceCheckUtils]: 44: Hoare triple {5041#(= ~pumpRunning~0 0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {5041#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:23,735 INFO L290 TraceCheckUtils]: 45: Hoare triple {5041#(= ~pumpRunning~0 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {5063#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:11:23,736 INFO L290 TraceCheckUtils]: 46: Hoare triple {5063#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {5064#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)} is VALID [2022-02-20 18:11:23,736 INFO L290 TraceCheckUtils]: 47: Hoare triple {5064#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~3#1| 0)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {5040#false} is VALID [2022-02-20 18:11:23,736 INFO L290 TraceCheckUtils]: 48: Hoare triple {5040#false} assume !false; {5040#false} is VALID [2022-02-20 18:11:23,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:23,737 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:23,737 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038292652] [2022-02-20 18:11:23,737 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038292652] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:23,737 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:23,737 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:23,737 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531693679] [2022-02-20 18:11:23,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:23,737 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-02-20 18:11:23,738 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:23,738 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:23,773 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:23,773 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:23,773 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:23,775 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:23,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:23,775 INFO L87 Difference]: Start difference. First operand 424 states and 546 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:24,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:24,654 INFO L93 Difference]: Finished difference Result 515 states and 667 transitions. [2022-02-20 18:11:24,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-02-20 18:11:24,654 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-02-20 18:11:24,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:24,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:24,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 289 transitions. [2022-02-20 18:11:24,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:24,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 289 transitions. [2022-02-20 18:11:24,661 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 21 states and 289 transitions. [2022-02-20 18:11:24,854 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 289 edges. 289 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:24,869 INFO L225 Difference]: With dead ends: 515 [2022-02-20 18:11:24,869 INFO L226 Difference]: Without dead ends: 513 [2022-02-20 18:11:24,869 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 91 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=127, Invalid=335, Unknown=0, NotChecked=0, Total=462 [2022-02-20 18:11:24,870 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 232 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 361 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 361 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:24,870 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [234 Valid, 398 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 361 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:24,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2022-02-20 18:11:24,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 465. [2022-02-20 18:11:24,887 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:24,888 INFO L82 GeneralOperation]: Start isEquivalent. First operand 513 states. Second operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:24,888 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:24,889 INFO L87 Difference]: Start difference. First operand 513 states. Second operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:24,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:24,903 INFO L93 Difference]: Finished difference Result 513 states and 662 transitions. [2022-02-20 18:11:24,903 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 662 transitions. [2022-02-20 18:11:24,904 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:24,904 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:24,905 INFO L74 IsIncluded]: Start isIncluded. First operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) Second operand 513 states. [2022-02-20 18:11:24,905 INFO L87 Difference]: Start difference. First operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) Second operand 513 states. [2022-02-20 18:11:24,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:24,936 INFO L93 Difference]: Finished difference Result 513 states and 662 transitions. [2022-02-20 18:11:24,936 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 662 transitions. [2022-02-20 18:11:24,937 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:24,937 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:24,937 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:24,937 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:24,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:24,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 465 states to 465 states and 600 transitions. [2022-02-20 18:11:24,951 INFO L78 Accepts]: Start accepts. Automaton has 465 states and 600 transitions. Word has length 49 [2022-02-20 18:11:24,951 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:24,951 INFO L470 AbstractCegarLoop]: Abstraction has 465 states and 600 transitions. [2022-02-20 18:11:24,951 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:24,952 INFO L276 IsEmpty]: Start isEmpty. Operand 465 states and 600 transitions. [2022-02-20 18:11:24,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:11:24,952 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:24,952 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:24,952 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:11:24,952 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:24,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:24,953 INFO L85 PathProgramCache]: Analyzing trace with hash -1510129521, now seen corresponding path program 1 times [2022-02-20 18:11:24,953 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:24,953 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490686848] [2022-02-20 18:11:24,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:24,953 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:24,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:24,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:24,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:24,987 INFO L290 TraceCheckUtils]: 0: Hoare triple {7544#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7515#true} is VALID [2022-02-20 18:11:24,987 INFO L290 TraceCheckUtils]: 1: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:24,988 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7515#true} {7515#true} #270#return; {7515#true} is VALID [2022-02-20 18:11:24,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:24,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:25,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:25,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:25,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:25,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:25,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {7515#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {7515#true} is VALID [2022-02-20 18:11:25,042 INFO L290 TraceCheckUtils]: 1: Hoare triple {7515#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {7515#true} is VALID [2022-02-20 18:11:25,042 INFO L290 TraceCheckUtils]: 2: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:25,042 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {7515#true} {7516#false} #278#return; {7516#false} is VALID [2022-02-20 18:11:25,042 INFO L290 TraceCheckUtils]: 0: Hoare triple {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7515#true} is VALID [2022-02-20 18:11:25,042 INFO L290 TraceCheckUtils]: 1: Hoare triple {7515#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,043 INFO L290 TraceCheckUtils]: 2: Hoare triple {7515#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,043 INFO L290 TraceCheckUtils]: 3: Hoare triple {7515#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7515#true} is VALID [2022-02-20 18:11:25,043 INFO L290 TraceCheckUtils]: 4: Hoare triple {7515#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:25,043 INFO L290 TraceCheckUtils]: 5: Hoare triple {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:25,044 INFO L290 TraceCheckUtils]: 6: Hoare triple {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:11:25,044 INFO L290 TraceCheckUtils]: 7: Hoare triple {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7516#false} is VALID [2022-02-20 18:11:25,044 INFO L272 TraceCheckUtils]: 8: Hoare triple {7516#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7515#true} is VALID [2022-02-20 18:11:25,044 INFO L290 TraceCheckUtils]: 9: Hoare triple {7515#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {7515#true} is VALID [2022-02-20 18:11:25,044 INFO L290 TraceCheckUtils]: 10: Hoare triple {7515#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {7515#true} is VALID [2022-02-20 18:11:25,044 INFO L290 TraceCheckUtils]: 11: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:25,044 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {7515#true} {7516#false} #278#return; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L290 TraceCheckUtils]: 13: Hoare triple {7516#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L290 TraceCheckUtils]: 14: Hoare triple {7516#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L290 TraceCheckUtils]: 15: Hoare triple {7516#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L290 TraceCheckUtils]: 16: Hoare triple {7516#false} assume { :end_inline_activatePump } true; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L290 TraceCheckUtils]: 17: Hoare triple {7516#false} assume true; {7516#false} is VALID [2022-02-20 18:11:25,045 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {7516#false} {7515#true} #288#return; {7516#false} is VALID [2022-02-20 18:11:25,046 INFO L290 TraceCheckUtils]: 0: Hoare triple {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {7515#true} is VALID [2022-02-20 18:11:25,046 INFO L290 TraceCheckUtils]: 1: Hoare triple {7515#true} assume !(0 != ~pumpRunning~0); {7515#true} is VALID [2022-02-20 18:11:25,047 INFO L272 TraceCheckUtils]: 2: Hoare triple {7515#true} call processEnvironment__wrappee__highWaterSensor(); {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:25,047 INFO L290 TraceCheckUtils]: 3: Hoare triple {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7515#true} is VALID [2022-02-20 18:11:25,047 INFO L290 TraceCheckUtils]: 4: Hoare triple {7515#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,047 INFO L290 TraceCheckUtils]: 5: Hoare triple {7515#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,048 INFO L290 TraceCheckUtils]: 6: Hoare triple {7515#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7515#true} is VALID [2022-02-20 18:11:25,048 INFO L290 TraceCheckUtils]: 7: Hoare triple {7515#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:25,048 INFO L290 TraceCheckUtils]: 8: Hoare triple {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:25,049 INFO L290 TraceCheckUtils]: 9: Hoare triple {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:11:25,049 INFO L290 TraceCheckUtils]: 10: Hoare triple {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7516#false} is VALID [2022-02-20 18:11:25,050 INFO L272 TraceCheckUtils]: 11: Hoare triple {7516#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7515#true} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 12: Hoare triple {7515#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {7515#true} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 13: Hoare triple {7515#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {7515#true} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 14: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:25,051 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {7515#true} {7516#false} #278#return; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 16: Hoare triple {7516#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 17: Hoare triple {7516#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 18: Hoare triple {7516#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 19: Hoare triple {7516#false} assume { :end_inline_activatePump } true; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 20: Hoare triple {7516#false} assume true; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {7516#false} {7515#true} #288#return; {7516#false} is VALID [2022-02-20 18:11:25,051 INFO L290 TraceCheckUtils]: 22: Hoare triple {7516#false} assume true; {7516#false} is VALID [2022-02-20 18:11:25,052 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {7516#false} {7515#true} #268#return; {7516#false} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 0: Hoare triple {7515#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 1: Hoare triple {7515#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 2: Hoare triple {7515#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 3: Hoare triple {7515#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 4: Hoare triple {7515#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 5: Hoare triple {7515#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 6: Hoare triple {7515#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 7: Hoare triple {7515#true} assume !false; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 8: Hoare triple {7515#true} assume test_~splverifierCounter~0#1 < 4; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 9: Hoare triple {7515#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {7515#true} is VALID [2022-02-20 18:11:25,052 INFO L290 TraceCheckUtils]: 10: Hoare triple {7515#true} assume 0 != test_~tmp~6#1; {7515#true} is VALID [2022-02-20 18:11:25,053 INFO L272 TraceCheckUtils]: 11: Hoare triple {7515#true} call waterRise(); {7544#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 12: Hoare triple {7544#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 13: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {7515#true} {7515#true} #270#return; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 15: Hoare triple {7515#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 16: Hoare triple {7515#true} assume !(0 != test_~tmp___0~2#1); {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 17: Hoare triple {7515#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 18: Hoare triple {7515#true} assume 0 != test_~tmp___2~0#1; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L272 TraceCheckUtils]: 19: Hoare triple {7515#true} call timeShift(); {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 20: Hoare triple {7515#true} assume !(0 != ~pumpRunning~0); {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 21: Hoare triple {7515#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {7515#true} is VALID [2022-02-20 18:11:25,057 INFO L290 TraceCheckUtils]: 22: Hoare triple {7515#true} assume !(0 != ~pumpRunning~0); {7515#true} is VALID [2022-02-20 18:11:25,058 INFO L272 TraceCheckUtils]: 23: Hoare triple {7515#true} call processEnvironment__wrappee__methaneQuery(); {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:25,058 INFO L290 TraceCheckUtils]: 24: Hoare triple {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {7515#true} is VALID [2022-02-20 18:11:25,058 INFO L290 TraceCheckUtils]: 25: Hoare triple {7515#true} assume !(0 != ~pumpRunning~0); {7515#true} is VALID [2022-02-20 18:11:25,058 INFO L272 TraceCheckUtils]: 26: Hoare triple {7515#true} call processEnvironment__wrappee__highWaterSensor(); {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:25,058 INFO L290 TraceCheckUtils]: 27: Hoare triple {7545#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7515#true} is VALID [2022-02-20 18:11:25,058 INFO L290 TraceCheckUtils]: 28: Hoare triple {7515#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,058 INFO L290 TraceCheckUtils]: 29: Hoare triple {7515#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {7515#true} is VALID [2022-02-20 18:11:25,059 INFO L290 TraceCheckUtils]: 30: Hoare triple {7515#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {7515#true} is VALID [2022-02-20 18:11:25,059 INFO L290 TraceCheckUtils]: 31: Hoare triple {7515#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~0#1 := 0; {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:25,059 INFO L290 TraceCheckUtils]: 32: Hoare triple {7565#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 33: Hoare triple {7566#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 34: Hoare triple {7567#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L272 TraceCheckUtils]: 35: Hoare triple {7516#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {7515#true} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 36: Hoare triple {7515#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {7515#true} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 37: Hoare triple {7515#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {7515#true} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 38: Hoare triple {7515#true} assume true; {7515#true} is VALID [2022-02-20 18:11:25,060 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {7515#true} {7516#false} #278#return; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 40: Hoare triple {7516#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 41: Hoare triple {7516#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 42: Hoare triple {7516#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 43: Hoare triple {7516#false} assume { :end_inline_activatePump } true; {7516#false} is VALID [2022-02-20 18:11:25,060 INFO L290 TraceCheckUtils]: 44: Hoare triple {7516#false} assume true; {7516#false} is VALID [2022-02-20 18:11:25,061 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {7516#false} {7515#true} #288#return; {7516#false} is VALID [2022-02-20 18:11:25,061 INFO L290 TraceCheckUtils]: 46: Hoare triple {7516#false} assume true; {7516#false} is VALID [2022-02-20 18:11:25,061 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {7516#false} {7515#true} #268#return; {7516#false} is VALID [2022-02-20 18:11:25,061 INFO L290 TraceCheckUtils]: 48: Hoare triple {7516#false} assume { :end_inline_processEnvironment } true; {7516#false} is VALID [2022-02-20 18:11:25,061 INFO L290 TraceCheckUtils]: 49: Hoare triple {7516#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {7516#false} is VALID [2022-02-20 18:11:25,062 INFO L290 TraceCheckUtils]: 50: Hoare triple {7516#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {7516#false} is VALID [2022-02-20 18:11:25,062 INFO L290 TraceCheckUtils]: 51: Hoare triple {7516#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {7516#false} is VALID [2022-02-20 18:11:25,062 INFO L290 TraceCheckUtils]: 52: Hoare triple {7516#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {7516#false} is VALID [2022-02-20 18:11:25,062 INFO L290 TraceCheckUtils]: 53: Hoare triple {7516#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {7516#false} is VALID [2022-02-20 18:11:25,064 INFO L290 TraceCheckUtils]: 54: Hoare triple {7516#false} assume !false; {7516#false} is VALID [2022-02-20 18:11:25,064 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:25,064 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:25,064 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490686848] [2022-02-20 18:11:25,064 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1490686848] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:25,065 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:25,065 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:25,065 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1696658890] [2022-02-20 18:11:25,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:25,065 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-02-20 18:11:25,066 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:25,066 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:25,093 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:25,093 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:25,093 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:25,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:25,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:25,094 INFO L87 Difference]: Start difference. First operand 465 states and 600 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:25,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:25,734 INFO L93 Difference]: Finished difference Result 971 states and 1329 transitions. [2022-02-20 18:11:25,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:11:25,735 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-02-20 18:11:25,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:25,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:25,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 292 transitions. [2022-02-20 18:11:25,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:25,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 292 transitions. [2022-02-20 18:11:25,741 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 292 transitions. [2022-02-20 18:11:25,920 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 292 edges. 292 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:25,941 INFO L225 Difference]: With dead ends: 971 [2022-02-20 18:11:25,942 INFO L226 Difference]: Without dead ends: 513 [2022-02-20 18:11:25,943 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:25,944 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 161 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 297 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 360 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 297 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:25,944 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [162 Valid, 322 Invalid, 360 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 297 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:11:25,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2022-02-20 18:11:25,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 474. [2022-02-20 18:11:25,963 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:25,964 INFO L82 GeneralOperation]: Start isEquivalent. First operand 513 states. Second operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:25,964 INFO L74 IsIncluded]: Start isIncluded. First operand 513 states. Second operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:25,965 INFO L87 Difference]: Start difference. First operand 513 states. Second operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:25,978 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:25,978 INFO L93 Difference]: Finished difference Result 513 states and 665 transitions. [2022-02-20 18:11:25,978 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 665 transitions. [2022-02-20 18:11:25,979 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:25,979 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:25,985 INFO L74 IsIncluded]: Start isIncluded. First operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) Second operand 513 states. [2022-02-20 18:11:25,986 INFO L87 Difference]: Start difference. First operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) Second operand 513 states. [2022-02-20 18:11:26,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:26,002 INFO L93 Difference]: Finished difference Result 513 states and 665 transitions. [2022-02-20 18:11:26,002 INFO L276 IsEmpty]: Start isEmpty. Operand 513 states and 665 transitions. [2022-02-20 18:11:26,003 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:26,003 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:26,003 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:26,003 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:26,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-02-20 18:11:26,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 474 states to 474 states and 609 transitions. [2022-02-20 18:11:26,019 INFO L78 Accepts]: Start accepts. Automaton has 474 states and 609 transitions. Word has length 55 [2022-02-20 18:11:26,019 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:26,019 INFO L470 AbstractCegarLoop]: Abstraction has 474 states and 609 transitions. [2022-02-20 18:11:26,020 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-02-20 18:11:26,020 INFO L276 IsEmpty]: Start isEmpty. Operand 474 states and 609 transitions. [2022-02-20 18:11:26,020 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:11:26,020 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:26,021 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:26,021 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:11:26,021 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:26,021 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:26,021 INFO L85 PathProgramCache]: Analyzing trace with hash -1644143027, now seen corresponding path program 1 times [2022-02-20 18:11:26,021 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:26,021 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694077942] [2022-02-20 18:11:26,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:26,022 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:26,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:26,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:26,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:26,058 INFO L290 TraceCheckUtils]: 0: Hoare triple {10663#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10633#true} is VALID [2022-02-20 18:11:26,058 INFO L290 TraceCheckUtils]: 1: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,058 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10633#true} {10635#(= 1 ~systemActive~0)} #270#return; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:26,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:26,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:26,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:26,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:26,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:26,100 INFO L290 TraceCheckUtils]: 0: Hoare triple {10633#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {10633#true} is VALID [2022-02-20 18:11:26,100 INFO L290 TraceCheckUtils]: 1: Hoare triple {10633#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {10633#true} is VALID [2022-02-20 18:11:26,101 INFO L290 TraceCheckUtils]: 2: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,101 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {10633#true} {10634#false} #278#return; {10634#false} is VALID [2022-02-20 18:11:26,101 INFO L290 TraceCheckUtils]: 0: Hoare triple {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10633#true} is VALID [2022-02-20 18:11:26,101 INFO L290 TraceCheckUtils]: 1: Hoare triple {10633#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {10633#true} is VALID [2022-02-20 18:11:26,101 INFO L290 TraceCheckUtils]: 2: Hoare triple {10633#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 3: Hoare triple {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 4: Hoare triple {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10634#false} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 5: Hoare triple {10634#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {10634#false} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 6: Hoare triple {10634#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {10634#false} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 7: Hoare triple {10634#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {10634#false} is VALID [2022-02-20 18:11:26,102 INFO L272 TraceCheckUtils]: 8: Hoare triple {10634#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {10633#true} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 9: Hoare triple {10633#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {10633#true} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 10: Hoare triple {10633#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {10633#true} is VALID [2022-02-20 18:11:26,102 INFO L290 TraceCheckUtils]: 11: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,103 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {10633#true} {10634#false} #278#return; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 13: Hoare triple {10634#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 14: Hoare triple {10634#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 15: Hoare triple {10634#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 16: Hoare triple {10634#false} assume { :end_inline_activatePump } true; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 17: Hoare triple {10634#false} assume true; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {10634#false} {10633#true} #288#return; {10634#false} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 0: Hoare triple {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {10633#true} is VALID [2022-02-20 18:11:26,103 INFO L290 TraceCheckUtils]: 1: Hoare triple {10633#true} assume !(0 != ~pumpRunning~0); {10633#true} is VALID [2022-02-20 18:11:26,104 INFO L272 TraceCheckUtils]: 2: Hoare triple {10633#true} call processEnvironment__wrappee__highWaterSensor(); {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:26,104 INFO L290 TraceCheckUtils]: 3: Hoare triple {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10633#true} is VALID [2022-02-20 18:11:26,104 INFO L290 TraceCheckUtils]: 4: Hoare triple {10633#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {10633#true} is VALID [2022-02-20 18:11:26,104 INFO L290 TraceCheckUtils]: 5: Hoare triple {10633#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 6: Hoare triple {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 7: Hoare triple {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10634#false} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 8: Hoare triple {10634#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {10634#false} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 9: Hoare triple {10634#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {10634#false} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 10: Hoare triple {10634#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {10634#false} is VALID [2022-02-20 18:11:26,105 INFO L272 TraceCheckUtils]: 11: Hoare triple {10634#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {10633#true} is VALID [2022-02-20 18:11:26,105 INFO L290 TraceCheckUtils]: 12: Hoare triple {10633#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {10633#true} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 13: Hoare triple {10633#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {10633#true} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 14: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,106 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10633#true} {10634#false} #278#return; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 16: Hoare triple {10634#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 17: Hoare triple {10634#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 18: Hoare triple {10634#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 19: Hoare triple {10634#false} assume { :end_inline_activatePump } true; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 20: Hoare triple {10634#false} assume true; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10634#false} {10633#true} #288#return; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L290 TraceCheckUtils]: 22: Hoare triple {10634#false} assume true; {10634#false} is VALID [2022-02-20 18:11:26,106 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {10634#false} {10633#true} #268#return; {10634#false} is VALID [2022-02-20 18:11:26,108 INFO L290 TraceCheckUtils]: 0: Hoare triple {10633#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,108 INFO L290 TraceCheckUtils]: 1: Hoare triple {10635#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,109 INFO L290 TraceCheckUtils]: 2: Hoare triple {10635#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,109 INFO L290 TraceCheckUtils]: 3: Hoare triple {10635#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,109 INFO L290 TraceCheckUtils]: 4: Hoare triple {10635#(= 1 ~systemActive~0)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,109 INFO L290 TraceCheckUtils]: 5: Hoare triple {10635#(= 1 ~systemActive~0)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,110 INFO L290 TraceCheckUtils]: 6: Hoare triple {10635#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,110 INFO L290 TraceCheckUtils]: 7: Hoare triple {10635#(= 1 ~systemActive~0)} assume !false; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,110 INFO L290 TraceCheckUtils]: 8: Hoare triple {10635#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,111 INFO L290 TraceCheckUtils]: 9: Hoare triple {10635#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,111 INFO L290 TraceCheckUtils]: 10: Hoare triple {10635#(= 1 ~systemActive~0)} assume 0 != test_~tmp~6#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,112 INFO L272 TraceCheckUtils]: 11: Hoare triple {10635#(= 1 ~systemActive~0)} call waterRise(); {10663#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:26,112 INFO L290 TraceCheckUtils]: 12: Hoare triple {10663#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10633#true} is VALID [2022-02-20 18:11:26,112 INFO L290 TraceCheckUtils]: 13: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,112 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {10633#true} {10635#(= 1 ~systemActive~0)} #270#return; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,112 INFO L290 TraceCheckUtils]: 15: Hoare triple {10635#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,113 INFO L290 TraceCheckUtils]: 16: Hoare triple {10635#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,113 INFO L290 TraceCheckUtils]: 17: Hoare triple {10635#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,113 INFO L290 TraceCheckUtils]: 18: Hoare triple {10635#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,114 INFO L272 TraceCheckUtils]: 19: Hoare triple {10635#(= 1 ~systemActive~0)} call timeShift(); {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,114 INFO L290 TraceCheckUtils]: 20: Hoare triple {10635#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {10635#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:26,114 INFO L290 TraceCheckUtils]: 21: Hoare triple {10635#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {10633#true} is VALID [2022-02-20 18:11:26,114 INFO L290 TraceCheckUtils]: 22: Hoare triple {10633#true} assume !(0 != ~pumpRunning~0); {10633#true} is VALID [2022-02-20 18:11:26,114 INFO L272 TraceCheckUtils]: 23: Hoare triple {10633#true} call processEnvironment__wrappee__methaneQuery(); {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:26,114 INFO L290 TraceCheckUtils]: 24: Hoare triple {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {10633#true} is VALID [2022-02-20 18:11:26,114 INFO L290 TraceCheckUtils]: 25: Hoare triple {10633#true} assume !(0 != ~pumpRunning~0); {10633#true} is VALID [2022-02-20 18:11:26,115 INFO L272 TraceCheckUtils]: 26: Hoare triple {10633#true} call processEnvironment__wrappee__highWaterSensor(); {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:26,115 INFO L290 TraceCheckUtils]: 27: Hoare triple {10664#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10633#true} is VALID [2022-02-20 18:11:26,115 INFO L290 TraceCheckUtils]: 28: Hoare triple {10633#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {10633#true} is VALID [2022-02-20 18:11:26,115 INFO L290 TraceCheckUtils]: 29: Hoare triple {10633#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 30: Hoare triple {10684#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 31: Hoare triple {10685#(<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10634#false} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 32: Hoare triple {10634#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {10634#false} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 33: Hoare triple {10634#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {10634#false} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 34: Hoare triple {10634#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {10634#false} is VALID [2022-02-20 18:11:26,116 INFO L272 TraceCheckUtils]: 35: Hoare triple {10634#false} call activatePump_#t~ret8#1 := isMethaneAlarm(); {10633#true} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 36: Hoare triple {10633#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {10633#true} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 37: Hoare triple {10633#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {10633#true} is VALID [2022-02-20 18:11:26,116 INFO L290 TraceCheckUtils]: 38: Hoare triple {10633#true} assume true; {10633#true} is VALID [2022-02-20 18:11:26,117 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {10633#true} {10634#false} #278#return; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 40: Hoare triple {10634#false} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 41: Hoare triple {10634#false} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 42: Hoare triple {10634#false} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 43: Hoare triple {10634#false} assume { :end_inline_activatePump } true; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 44: Hoare triple {10634#false} assume true; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {10634#false} {10633#true} #288#return; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 46: Hoare triple {10634#false} assume true; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {10634#false} {10633#true} #268#return; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 48: Hoare triple {10634#false} assume { :end_inline_processEnvironment } true; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 49: Hoare triple {10634#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {10634#false} is VALID [2022-02-20 18:11:26,117 INFO L290 TraceCheckUtils]: 50: Hoare triple {10634#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {10634#false} is VALID [2022-02-20 18:11:26,118 INFO L290 TraceCheckUtils]: 51: Hoare triple {10634#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {10634#false} is VALID [2022-02-20 18:11:26,118 INFO L290 TraceCheckUtils]: 52: Hoare triple {10634#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {10634#false} is VALID [2022-02-20 18:11:26,118 INFO L290 TraceCheckUtils]: 53: Hoare triple {10634#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {10634#false} is VALID [2022-02-20 18:11:26,118 INFO L290 TraceCheckUtils]: 54: Hoare triple {10634#false} assume !false; {10634#false} is VALID [2022-02-20 18:11:26,118 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:26,118 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:26,118 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694077942] [2022-02-20 18:11:26,118 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694077942] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:26,119 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:26,119 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:26,119 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207457075] [2022-02-20 18:11:26,119 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:26,119 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:11:26,119 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:26,120 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:11:26,150 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:26,150 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:26,150 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:26,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:26,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:26,151 INFO L87 Difference]: Start difference. First operand 474 states and 609 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:11:26,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:26,937 INFO L93 Difference]: Finished difference Result 942 states and 1257 transitions. [2022-02-20 18:11:26,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:11:26,937 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:11:26,937 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:26,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:11:26,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 287 transitions. [2022-02-20 18:11:26,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:11:26,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 287 transitions. [2022-02-20 18:11:26,944 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 287 transitions. [2022-02-20 18:11:27,113 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 287 edges. 287 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:27,132 INFO L225 Difference]: With dead ends: 942 [2022-02-20 18:11:27,133 INFO L226 Difference]: Without dead ends: 475 [2022-02-20 18:11:27,135 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:27,136 INFO L933 BasicCegarLoop]: 92 mSDtfsCounter, 255 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:27,136 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [258 Valid, 260 Invalid, 324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:27,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2022-02-20 18:11:27,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 458. [2022-02-20 18:11:27,162 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:27,164 INFO L82 GeneralOperation]: Start isEquivalent. First operand 475 states. Second operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) [2022-02-20 18:11:27,165 INFO L74 IsIncluded]: Start isIncluded. First operand 475 states. Second operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) [2022-02-20 18:11:27,166 INFO L87 Difference]: Start difference. First operand 475 states. Second operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) [2022-02-20 18:11:27,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:27,182 INFO L93 Difference]: Finished difference Result 475 states and 606 transitions. [2022-02-20 18:11:27,182 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 606 transitions. [2022-02-20 18:11:27,183 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:27,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:27,186 INFO L74 IsIncluded]: Start isIncluded. First operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) Second operand 475 states. [2022-02-20 18:11:27,187 INFO L87 Difference]: Start difference. First operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) Second operand 475 states. [2022-02-20 18:11:27,203 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:27,203 INFO L93 Difference]: Finished difference Result 475 states and 606 transitions. [2022-02-20 18:11:27,203 INFO L276 IsEmpty]: Start isEmpty. Operand 475 states and 606 transitions. [2022-02-20 18:11:27,205 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:27,205 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:27,205 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:27,205 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:27,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) [2022-02-20 18:11:27,252 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 585 transitions. [2022-02-20 18:11:27,252 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 585 transitions. Word has length 55 [2022-02-20 18:11:27,253 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:27,253 INFO L470 AbstractCegarLoop]: Abstraction has 458 states and 585 transitions. [2022-02-20 18:11:27,253 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:11:27,253 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 585 transitions. [2022-02-20 18:11:27,255 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-02-20 18:11:27,256 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:27,256 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:27,256 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:11:27,256 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:27,257 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:27,257 INFO L85 PathProgramCache]: Analyzing trace with hash -44103232, now seen corresponding path program 1 times [2022-02-20 18:11:27,257 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:27,257 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1856121283] [2022-02-20 18:11:27,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:27,258 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:27,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:11:27,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:27,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:27,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:27,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,392 INFO L290 TraceCheckUtils]: 0: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,392 INFO L290 TraceCheckUtils]: 2: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,393 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13615#true} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,393 INFO L290 TraceCheckUtils]: 0: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,393 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {13615#true} is VALID [2022-02-20 18:11:27,394 INFO L290 TraceCheckUtils]: 2: Hoare triple {13615#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,394 INFO L290 TraceCheckUtils]: 3: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,394 INFO L290 TraceCheckUtils]: 4: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,395 INFO L290 TraceCheckUtils]: 5: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,395 INFO L290 TraceCheckUtils]: 6: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,395 INFO L290 TraceCheckUtils]: 7: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,396 INFO L272 TraceCheckUtils]: 8: Hoare triple {13725#(not (<= ~waterLevel~0 1))} call activatePump_#t~ret8#1 := isMethaneAlarm(); {13615#true} is VALID [2022-02-20 18:11:27,396 INFO L290 TraceCheckUtils]: 9: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,396 INFO L290 TraceCheckUtils]: 10: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,396 INFO L290 TraceCheckUtils]: 11: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,396 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {13615#true} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,397 INFO L290 TraceCheckUtils]: 13: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,397 INFO L290 TraceCheckUtils]: 14: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,397 INFO L290 TraceCheckUtils]: 15: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,398 INFO L290 TraceCheckUtils]: 16: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,398 INFO L290 TraceCheckUtils]: 17: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,400 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13615#true} #288#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,400 INFO L290 TraceCheckUtils]: 0: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:27,401 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} assume !(0 != ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,402 INFO L272 TraceCheckUtils]: 2: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,402 INFO L290 TraceCheckUtils]: 3: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,402 INFO L290 TraceCheckUtils]: 4: Hoare triple {13615#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {13615#true} is VALID [2022-02-20 18:11:27,403 INFO L290 TraceCheckUtils]: 5: Hoare triple {13615#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,403 INFO L290 TraceCheckUtils]: 6: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,403 INFO L290 TraceCheckUtils]: 7: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,404 INFO L290 TraceCheckUtils]: 8: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,404 INFO L290 TraceCheckUtils]: 9: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,404 INFO L290 TraceCheckUtils]: 10: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,404 INFO L272 TraceCheckUtils]: 11: Hoare triple {13725#(not (<= ~waterLevel~0 1))} call activatePump_#t~ret8#1 := isMethaneAlarm(); {13615#true} is VALID [2022-02-20 18:11:27,404 INFO L290 TraceCheckUtils]: 12: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,405 INFO L290 TraceCheckUtils]: 13: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,405 INFO L290 TraceCheckUtils]: 14: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,405 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {13615#true} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,406 INFO L290 TraceCheckUtils]: 16: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,406 INFO L290 TraceCheckUtils]: 17: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,406 INFO L290 TraceCheckUtils]: 18: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,406 INFO L290 TraceCheckUtils]: 19: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,407 INFO L290 TraceCheckUtils]: 20: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,407 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13615#true} #288#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,407 INFO L290 TraceCheckUtils]: 22: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,408 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} #268#return; {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,409 INFO L290 TraceCheckUtils]: 0: Hoare triple {13677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,409 INFO L290 TraceCheckUtils]: 1: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,409 INFO L290 TraceCheckUtils]: 2: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,410 INFO L272 TraceCheckUtils]: 3: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} call processEnvironment__wrappee__methaneQuery(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,410 INFO L290 TraceCheckUtils]: 4: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:27,410 INFO L290 TraceCheckUtils]: 5: Hoare triple {13615#true} assume !(0 != ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,410 INFO L272 TraceCheckUtils]: 6: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,410 INFO L290 TraceCheckUtils]: 7: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,411 INFO L290 TraceCheckUtils]: 8: Hoare triple {13615#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {13615#true} is VALID [2022-02-20 18:11:27,411 INFO L290 TraceCheckUtils]: 9: Hoare triple {13615#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,411 INFO L290 TraceCheckUtils]: 10: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,412 INFO L290 TraceCheckUtils]: 11: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,412 INFO L290 TraceCheckUtils]: 12: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,412 INFO L290 TraceCheckUtils]: 13: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,413 INFO L290 TraceCheckUtils]: 14: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,413 INFO L272 TraceCheckUtils]: 15: Hoare triple {13725#(not (<= ~waterLevel~0 1))} call activatePump_#t~ret8#1 := isMethaneAlarm(); {13615#true} is VALID [2022-02-20 18:11:27,413 INFO L290 TraceCheckUtils]: 16: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,413 INFO L290 TraceCheckUtils]: 17: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,413 INFO L290 TraceCheckUtils]: 18: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,414 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {13615#true} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,414 INFO L290 TraceCheckUtils]: 20: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,414 INFO L290 TraceCheckUtils]: 21: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,415 INFO L290 TraceCheckUtils]: 22: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,415 INFO L290 TraceCheckUtils]: 23: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,415 INFO L290 TraceCheckUtils]: 24: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,416 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13615#true} #288#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,416 INFO L290 TraceCheckUtils]: 26: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,416 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} #268#return; {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,417 INFO L290 TraceCheckUtils]: 28: Hoare triple {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :end_inline_processEnvironment } true; {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,417 INFO L290 TraceCheckUtils]: 29: Hoare triple {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,418 INFO L290 TraceCheckUtils]: 30: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,418 INFO L290 TraceCheckUtils]: 31: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,418 INFO L290 TraceCheckUtils]: 32: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,419 INFO L290 TraceCheckUtils]: 33: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume true; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,419 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {13704#(<= 2 |old(~waterLevel~0)|)} {13617#(= ~waterLevel~0 1)} #274#return; {13616#false} is VALID [2022-02-20 18:11:27,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:11:27,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,422 INFO L290 TraceCheckUtils]: 0: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13615#true} is VALID [2022-02-20 18:11:27,423 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,423 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13615#true} {13616#false} #270#return; {13616#false} is VALID [2022-02-20 18:11:27,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-02-20 18:11:27,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,426 INFO L290 TraceCheckUtils]: 0: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,427 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,427 INFO L290 TraceCheckUtils]: 2: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,427 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13615#true} {13616#false} #262#return; {13616#false} is VALID [2022-02-20 18:11:27,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-02-20 18:11:27,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:27,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:27,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,440 INFO L290 TraceCheckUtils]: 0: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,440 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {13615#true} {13615#true} #282#return; {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L290 TraceCheckUtils]: 0: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} assume !(0 == ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L272 TraceCheckUtils]: 2: Hoare triple {13615#true} call processEnvironment__wrappee__base(); {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L290 TraceCheckUtils]: 3: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {13615#true} {13615#true} #282#return; {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L290 TraceCheckUtils]: 5: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,441 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {13615#true} {13615#true} #286#return; {13615#true} is VALID [2022-02-20 18:11:27,442 INFO L290 TraceCheckUtils]: 0: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:27,442 INFO L290 TraceCheckUtils]: 1: Hoare triple {13615#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {13615#true} is VALID [2022-02-20 18:11:27,442 INFO L290 TraceCheckUtils]: 2: Hoare triple {13615#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {13615#true} is VALID [2022-02-20 18:11:27,442 INFO L290 TraceCheckUtils]: 3: Hoare triple {13615#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {13615#true} is VALID [2022-02-20 18:11:27,442 INFO L290 TraceCheckUtils]: 4: Hoare triple {13615#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {13615#true} is VALID [2022-02-20 18:11:27,443 INFO L290 TraceCheckUtils]: 5: Hoare triple {13615#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {13615#true} is VALID [2022-02-20 18:11:27,443 INFO L290 TraceCheckUtils]: 6: Hoare triple {13615#true} assume !(0 != ~tmp~1#1); {13615#true} is VALID [2022-02-20 18:11:27,443 INFO L272 TraceCheckUtils]: 7: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,443 INFO L290 TraceCheckUtils]: 8: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,443 INFO L290 TraceCheckUtils]: 9: Hoare triple {13615#true} assume !(0 == ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L272 TraceCheckUtils]: 10: Hoare triple {13615#true} call processEnvironment__wrappee__base(); {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L290 TraceCheckUtils]: 11: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {13615#true} {13615#true} #282#return; {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L290 TraceCheckUtils]: 13: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {13615#true} {13615#true} #286#return; {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L290 TraceCheckUtils]: 15: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,444 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {13615#true} {13616#false} #266#return; {13616#false} is VALID [2022-02-20 18:11:27,445 INFO L290 TraceCheckUtils]: 0: Hoare triple {13615#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,445 INFO L290 TraceCheckUtils]: 1: Hoare triple {13617#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,445 INFO L290 TraceCheckUtils]: 2: Hoare triple {13617#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,446 INFO L290 TraceCheckUtils]: 3: Hoare triple {13617#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,446 INFO L290 TraceCheckUtils]: 4: Hoare triple {13617#(= ~waterLevel~0 1)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,446 INFO L290 TraceCheckUtils]: 5: Hoare triple {13617#(= ~waterLevel~0 1)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,446 INFO L290 TraceCheckUtils]: 6: Hoare triple {13617#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,447 INFO L290 TraceCheckUtils]: 7: Hoare triple {13617#(= ~waterLevel~0 1)} assume !false; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,447 INFO L290 TraceCheckUtils]: 8: Hoare triple {13617#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,447 INFO L290 TraceCheckUtils]: 9: Hoare triple {13617#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,448 INFO L290 TraceCheckUtils]: 10: Hoare triple {13617#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~6#1); {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,448 INFO L290 TraceCheckUtils]: 11: Hoare triple {13617#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,448 INFO L290 TraceCheckUtils]: 12: Hoare triple {13617#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,448 INFO L290 TraceCheckUtils]: 13: Hoare triple {13617#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,449 INFO L290 TraceCheckUtils]: 14: Hoare triple {13617#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {13617#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,449 INFO L272 TraceCheckUtils]: 15: Hoare triple {13617#(= ~waterLevel~0 1)} call timeShift(); {13677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,449 INFO L290 TraceCheckUtils]: 16: Hoare triple {13677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,450 INFO L290 TraceCheckUtils]: 17: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,450 INFO L290 TraceCheckUtils]: 18: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,450 INFO L272 TraceCheckUtils]: 19: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} call processEnvironment__wrappee__methaneQuery(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,450 INFO L290 TraceCheckUtils]: 20: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:27,450 INFO L290 TraceCheckUtils]: 21: Hoare triple {13615#true} assume !(0 != ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,451 INFO L272 TraceCheckUtils]: 22: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,451 INFO L290 TraceCheckUtils]: 23: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,451 INFO L290 TraceCheckUtils]: 24: Hoare triple {13615#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {13615#true} is VALID [2022-02-20 18:11:27,451 INFO L290 TraceCheckUtils]: 25: Hoare triple {13615#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,451 INFO L290 TraceCheckUtils]: 26: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,452 INFO L290 TraceCheckUtils]: 27: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,452 INFO L290 TraceCheckUtils]: 28: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,452 INFO L290 TraceCheckUtils]: 29: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,453 INFO L290 TraceCheckUtils]: 30: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,453 INFO L272 TraceCheckUtils]: 31: Hoare triple {13725#(not (<= ~waterLevel~0 1))} call activatePump_#t~ret8#1 := isMethaneAlarm(); {13615#true} is VALID [2022-02-20 18:11:27,453 INFO L290 TraceCheckUtils]: 32: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,453 INFO L290 TraceCheckUtils]: 33: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,453 INFO L290 TraceCheckUtils]: 34: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,453 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {13615#true} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,453 INFO L290 TraceCheckUtils]: 36: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,454 INFO L290 TraceCheckUtils]: 37: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,454 INFO L290 TraceCheckUtils]: 38: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,454 INFO L290 TraceCheckUtils]: 39: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,455 INFO L290 TraceCheckUtils]: 40: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,455 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13615#true} #288#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,455 INFO L290 TraceCheckUtils]: 42: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:27,456 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} #268#return; {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,456 INFO L290 TraceCheckUtils]: 44: Hoare triple {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :end_inline_processEnvironment } true; {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:27,456 INFO L290 TraceCheckUtils]: 45: Hoare triple {13703#(and (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,457 INFO L290 TraceCheckUtils]: 46: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,457 INFO L290 TraceCheckUtils]: 47: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,457 INFO L290 TraceCheckUtils]: 48: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,457 INFO L290 TraceCheckUtils]: 49: Hoare triple {13704#(<= 2 |old(~waterLevel~0)|)} assume true; {13704#(<= 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:27,458 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {13704#(<= 2 |old(~waterLevel~0)|)} {13617#(= ~waterLevel~0 1)} #274#return; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 51: Hoare triple {13616#false} assume !false; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 52: Hoare triple {13616#false} assume test_~splverifierCounter~0#1 < 4; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 53: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 54: Hoare triple {13616#false} assume 0 != test_~tmp~6#1; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L272 TraceCheckUtils]: 55: Hoare triple {13616#false} call waterRise(); {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 56: Hoare triple {13678#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13615#true} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 57: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,458 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {13615#true} {13616#false} #270#return; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 59: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 60: Hoare triple {13616#false} assume !(0 != test_~tmp___0~2#1); {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 61: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L290 TraceCheckUtils]: 62: Hoare triple {13616#false} assume 0 != test_~tmp___2~0#1; {13616#false} is VALID [2022-02-20 18:11:27,458 INFO L272 TraceCheckUtils]: 63: Hoare triple {13616#false} call timeShift(); {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 64: Hoare triple {13616#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 65: Hoare triple {13616#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 66: Hoare triple {13616#false} assume { :end_inline_lowerWaterLevel } true; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 67: Hoare triple {13616#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 68: Hoare triple {13616#false} assume 0 != ~pumpRunning~0; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L272 TraceCheckUtils]: 69: Hoare triple {13616#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {13615#true} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 70: Hoare triple {13615#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13615#true} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 71: Hoare triple {13615#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13615#true} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 72: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,459 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {13615#true} {13616#false} #262#return; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 74: Hoare triple {13616#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 75: Hoare triple {13616#false} assume !(0 != processEnvironment_~tmp~2#1); {13616#false} is VALID [2022-02-20 18:11:27,459 INFO L272 TraceCheckUtils]: 76: Hoare triple {13616#false} call processEnvironment__wrappee__methaneQuery(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,459 INFO L290 TraceCheckUtils]: 77: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 78: Hoare triple {13615#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 79: Hoare triple {13615#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 80: Hoare triple {13615#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 81: Hoare triple {13615#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 82: Hoare triple {13615#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {13615#true} is VALID [2022-02-20 18:11:27,460 INFO L290 TraceCheckUtils]: 83: Hoare triple {13615#true} assume !(0 != ~tmp~1#1); {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L272 TraceCheckUtils]: 84: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 85: Hoare triple {13705#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 86: Hoare triple {13615#true} assume !(0 == ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L272 TraceCheckUtils]: 87: Hoare triple {13615#true} call processEnvironment__wrappee__base(); {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 88: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {13615#true} {13615#true} #282#return; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 90: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {13615#true} {13615#true} #286#return; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 92: Hoare triple {13615#true} assume true; {13615#true} is VALID [2022-02-20 18:11:27,462 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {13615#true} {13616#false} #266#return; {13616#false} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 94: Hoare triple {13616#false} assume { :end_inline_processEnvironment } true; {13616#false} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 95: Hoare triple {13616#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {13616#false} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 96: Hoare triple {13616#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {13616#false} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 97: Hoare triple {13616#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {13616#false} is VALID [2022-02-20 18:11:27,462 INFO L290 TraceCheckUtils]: 98: Hoare triple {13616#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {13616#false} is VALID [2022-02-20 18:11:27,463 INFO L290 TraceCheckUtils]: 99: Hoare triple {13616#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {13616#false} is VALID [2022-02-20 18:11:27,463 INFO L290 TraceCheckUtils]: 100: Hoare triple {13616#false} assume !false; {13616#false} is VALID [2022-02-20 18:11:27,463 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 16 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-02-20 18:11:27,463 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:27,463 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1856121283] [2022-02-20 18:11:27,463 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1856121283] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:27,463 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2030169738] [2022-02-20 18:11:27,463 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:27,464 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:27,464 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:27,465 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:27,466 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:11:27,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 483 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:11:27,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:27,605 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:27,998 INFO L290 TraceCheckUtils]: 0: Hoare triple {13615#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:27,999 INFO L290 TraceCheckUtils]: 1: Hoare triple {13742#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,000 INFO L290 TraceCheckUtils]: 2: Hoare triple {13742#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,000 INFO L290 TraceCheckUtils]: 3: Hoare triple {13742#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,000 INFO L290 TraceCheckUtils]: 4: Hoare triple {13742#(<= ~waterLevel~0 1)} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,001 INFO L290 TraceCheckUtils]: 5: Hoare triple {13742#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,001 INFO L290 TraceCheckUtils]: 6: Hoare triple {13742#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,001 INFO L290 TraceCheckUtils]: 7: Hoare triple {13742#(<= ~waterLevel~0 1)} assume !false; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,002 INFO L290 TraceCheckUtils]: 8: Hoare triple {13742#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,011 INFO L290 TraceCheckUtils]: 9: Hoare triple {13742#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,012 INFO L290 TraceCheckUtils]: 10: Hoare triple {13742#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~6#1); {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,012 INFO L290 TraceCheckUtils]: 11: Hoare triple {13742#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,013 INFO L290 TraceCheckUtils]: 12: Hoare triple {13742#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,013 INFO L290 TraceCheckUtils]: 13: Hoare triple {13742#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,013 INFO L290 TraceCheckUtils]: 14: Hoare triple {13742#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {13742#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:28,014 INFO L272 TraceCheckUtils]: 15: Hoare triple {13742#(<= ~waterLevel~0 1)} call timeShift(); {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:28,014 INFO L290 TraceCheckUtils]: 16: Hoare triple {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:28,015 INFO L290 TraceCheckUtils]: 17: Hoare triple {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:28,015 INFO L290 TraceCheckUtils]: 18: Hoare triple {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:28,015 INFO L272 TraceCheckUtils]: 19: Hoare triple {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__wrappee__methaneQuery(); {13615#true} is VALID [2022-02-20 18:11:28,015 INFO L290 TraceCheckUtils]: 20: Hoare triple {13615#true} havoc ~tmp~1#1; {13615#true} is VALID [2022-02-20 18:11:28,015 INFO L290 TraceCheckUtils]: 21: Hoare triple {13615#true} assume !(0 != ~pumpRunning~0); {13615#true} is VALID [2022-02-20 18:11:28,016 INFO L272 TraceCheckUtils]: 22: Hoare triple {13615#true} call processEnvironment__wrappee__highWaterSensor(); {13615#true} is VALID [2022-02-20 18:11:28,016 INFO L290 TraceCheckUtils]: 23: Hoare triple {13615#true} havoc ~tmp~0#1; {13615#true} is VALID [2022-02-20 18:11:28,016 INFO L290 TraceCheckUtils]: 24: Hoare triple {13615#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {13615#true} is VALID [2022-02-20 18:11:28,016 INFO L290 TraceCheckUtils]: 25: Hoare triple {13615#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,017 INFO L290 TraceCheckUtils]: 26: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,017 INFO L290 TraceCheckUtils]: 27: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,017 INFO L290 TraceCheckUtils]: 28: Hoare triple {13725#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,018 INFO L290 TraceCheckUtils]: 29: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,018 INFO L290 TraceCheckUtils]: 30: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,019 INFO L272 TraceCheckUtils]: 31: Hoare triple {13725#(not (<= ~waterLevel~0 1))} call activatePump_#t~ret8#1 := isMethaneAlarm(); {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,019 INFO L290 TraceCheckUtils]: 32: Hoare triple {13725#(not (<= ~waterLevel~0 1))} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,019 INFO L290 TraceCheckUtils]: 33: Hoare triple {13725#(not (<= ~waterLevel~0 1))} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,020 INFO L290 TraceCheckUtils]: 34: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,020 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13725#(not (<= ~waterLevel~0 1))} #278#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,020 INFO L290 TraceCheckUtils]: 36: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,021 INFO L290 TraceCheckUtils]: 37: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,021 INFO L290 TraceCheckUtils]: 38: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,021 INFO L290 TraceCheckUtils]: 39: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,022 INFO L290 TraceCheckUtils]: 40: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,022 INFO L284 TraceCheckUtils]: 41: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13615#true} #288#return; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,022 INFO L290 TraceCheckUtils]: 42: Hoare triple {13725#(not (<= ~waterLevel~0 1))} assume true; {13725#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:11:28,023 INFO L284 TraceCheckUtils]: 43: Hoare quadruple {13725#(not (<= ~waterLevel~0 1))} {13788#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #268#return; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,023 INFO L290 TraceCheckUtils]: 44: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} assume { :end_inline_processEnvironment } true; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,024 INFO L290 TraceCheckUtils]: 45: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,024 INFO L290 TraceCheckUtils]: 46: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,025 INFO L290 TraceCheckUtils]: 47: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,025 INFO L290 TraceCheckUtils]: 48: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,026 INFO L290 TraceCheckUtils]: 49: Hoare triple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} assume true; {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} is VALID [2022-02-20 18:11:28,026 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {13873#(and (<= ~waterLevel~0 |old(~waterLevel~0)|) (not (<= ~waterLevel~0 1)))} {13742#(<= ~waterLevel~0 1)} #274#return; {13616#false} is VALID [2022-02-20 18:11:28,026 INFO L290 TraceCheckUtils]: 51: Hoare triple {13616#false} assume !false; {13616#false} is VALID [2022-02-20 18:11:28,026 INFO L290 TraceCheckUtils]: 52: Hoare triple {13616#false} assume test_~splverifierCounter~0#1 < 4; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L290 TraceCheckUtils]: 53: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L290 TraceCheckUtils]: 54: Hoare triple {13616#false} assume 0 != test_~tmp~6#1; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L272 TraceCheckUtils]: 55: Hoare triple {13616#false} call waterRise(); {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L290 TraceCheckUtils]: 56: Hoare triple {13616#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L290 TraceCheckUtils]: 57: Hoare triple {13616#false} assume true; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L284 TraceCheckUtils]: 58: Hoare quadruple {13616#false} {13616#false} #270#return; {13616#false} is VALID [2022-02-20 18:11:28,027 INFO L290 TraceCheckUtils]: 59: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L290 TraceCheckUtils]: 60: Hoare triple {13616#false} assume !(0 != test_~tmp___0~2#1); {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L290 TraceCheckUtils]: 61: Hoare triple {13616#false} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L290 TraceCheckUtils]: 62: Hoare triple {13616#false} assume 0 != test_~tmp___2~0#1; {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L272 TraceCheckUtils]: 63: Hoare triple {13616#false} call timeShift(); {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L290 TraceCheckUtils]: 64: Hoare triple {13616#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {13616#false} is VALID [2022-02-20 18:11:28,028 INFO L290 TraceCheckUtils]: 65: Hoare triple {13616#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 66: Hoare triple {13616#false} assume { :end_inline_lowerWaterLevel } true; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 67: Hoare triple {13616#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 68: Hoare triple {13616#false} assume 0 != ~pumpRunning~0; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L272 TraceCheckUtils]: 69: Hoare triple {13616#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 70: Hoare triple {13616#false} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 71: Hoare triple {13616#false} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {13616#false} is VALID [2022-02-20 18:11:28,029 INFO L290 TraceCheckUtils]: 72: Hoare triple {13616#false} assume true; {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {13616#false} {13616#false} #262#return; {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L290 TraceCheckUtils]: 74: Hoare triple {13616#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L290 TraceCheckUtils]: 75: Hoare triple {13616#false} assume !(0 != processEnvironment_~tmp~2#1); {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L272 TraceCheckUtils]: 76: Hoare triple {13616#false} call processEnvironment__wrappee__methaneQuery(); {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L290 TraceCheckUtils]: 77: Hoare triple {13616#false} havoc ~tmp~1#1; {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L290 TraceCheckUtils]: 78: Hoare triple {13616#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {13616#false} is VALID [2022-02-20 18:11:28,030 INFO L290 TraceCheckUtils]: 79: Hoare triple {13616#false} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L290 TraceCheckUtils]: 80: Hoare triple {13616#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L290 TraceCheckUtils]: 81: Hoare triple {13616#false} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L290 TraceCheckUtils]: 82: Hoare triple {13616#false} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L290 TraceCheckUtils]: 83: Hoare triple {13616#false} assume !(0 != ~tmp~1#1); {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L272 TraceCheckUtils]: 84: Hoare triple {13616#false} call processEnvironment__wrappee__highWaterSensor(); {13616#false} is VALID [2022-02-20 18:11:28,031 INFO L290 TraceCheckUtils]: 85: Hoare triple {13616#false} havoc ~tmp~0#1; {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L290 TraceCheckUtils]: 86: Hoare triple {13616#false} assume !(0 == ~pumpRunning~0); {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L272 TraceCheckUtils]: 87: Hoare triple {13616#false} call processEnvironment__wrappee__base(); {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L290 TraceCheckUtils]: 88: Hoare triple {13616#false} assume true; {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {13616#false} {13616#false} #282#return; {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L290 TraceCheckUtils]: 90: Hoare triple {13616#false} assume true; {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {13616#false} {13616#false} #286#return; {13616#false} is VALID [2022-02-20 18:11:28,032 INFO L290 TraceCheckUtils]: 92: Hoare triple {13616#false} assume true; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {13616#false} {13616#false} #266#return; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 94: Hoare triple {13616#false} assume { :end_inline_processEnvironment } true; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 95: Hoare triple {13616#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 96: Hoare triple {13616#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 97: Hoare triple {13616#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 98: Hoare triple {13616#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {13616#false} is VALID [2022-02-20 18:11:28,033 INFO L290 TraceCheckUtils]: 99: Hoare triple {13616#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {13616#false} is VALID [2022-02-20 18:11:28,034 INFO L290 TraceCheckUtils]: 100: Hoare triple {13616#false} assume !false; {13616#false} is VALID [2022-02-20 18:11:28,034 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:28,034 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:28,035 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2030169738] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:28,035 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:28,035 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 12 [2022-02-20 18:11:28,035 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1785141707] [2022-02-20 18:11:28,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:28,036 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) Word has length 101 [2022-02-20 18:11:28,036 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:28,037 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-02-20 18:11:28,120 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 101 edges. 101 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:28,120 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:28,120 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:28,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:28,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:28,121 INFO L87 Difference]: Start difference. First operand 458 states and 585 transitions. Second operand has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-02-20 18:11:29,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,042 INFO L93 Difference]: Finished difference Result 859 states and 1148 transitions. [2022-02-20 18:11:29,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:11:29,043 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) Word has length 101 [2022-02-20 18:11:29,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:29,043 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-02-20 18:11:29,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 378 transitions. [2022-02-20 18:11:29,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-02-20 18:11:29,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 378 transitions. [2022-02-20 18:11:29,051 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 378 transitions. [2022-02-20 18:11:29,290 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 378 edges. 378 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:29,306 INFO L225 Difference]: With dead ends: 859 [2022-02-20 18:11:29,306 INFO L226 Difference]: Without dead ends: 408 [2022-02-20 18:11:29,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 115 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:11:29,310 INFO L933 BasicCegarLoop]: 164 mSDtfsCounter, 182 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 338 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 417 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 338 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:29,310 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [196 Valid, 359 Invalid, 417 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 338 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:29,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 408 states. [2022-02-20 18:11:29,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 408 to 404. [2022-02-20 18:11:29,477 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:29,478 INFO L82 GeneralOperation]: Start isEquivalent. First operand 408 states. Second operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) [2022-02-20 18:11:29,479 INFO L74 IsIncluded]: Start isIncluded. First operand 408 states. Second operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) [2022-02-20 18:11:29,479 INFO L87 Difference]: Start difference. First operand 408 states. Second operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) [2022-02-20 18:11:29,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,489 INFO L93 Difference]: Finished difference Result 408 states and 523 transitions. [2022-02-20 18:11:29,489 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 523 transitions. [2022-02-20 18:11:29,491 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:29,491 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:29,508 INFO L74 IsIncluded]: Start isIncluded. First operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) Second operand 408 states. [2022-02-20 18:11:29,508 INFO L87 Difference]: Start difference. First operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) Second operand 408 states. [2022-02-20 18:11:29,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,519 INFO L93 Difference]: Finished difference Result 408 states and 523 transitions. [2022-02-20 18:11:29,519 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 523 transitions. [2022-02-20 18:11:29,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:29,520 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:29,520 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:29,520 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:29,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 307 states have (on average 1.228013029315961) internal successors, (377), 327 states have internal predecessors, (377), 49 states have call successors, (49), 42 states have call predecessors, (49), 47 states have return successors, (93), 47 states have call predecessors, (93), 49 states have call successors, (93) [2022-02-20 18:11:29,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 519 transitions. [2022-02-20 18:11:29,534 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 519 transitions. Word has length 101 [2022-02-20 18:11:29,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:29,534 INFO L470 AbstractCegarLoop]: Abstraction has 404 states and 519 transitions. [2022-02-20 18:11:29,534 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.666666666666666) internal successors, (82), 6 states have internal predecessors, (82), 5 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-02-20 18:11:29,534 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 519 transitions. [2022-02-20 18:11:29,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-02-20 18:11:29,535 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:29,535 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:29,555 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:29,754 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:29,755 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:29,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:29,756 INFO L85 PathProgramCache]: Analyzing trace with hash -493181504, now seen corresponding path program 2 times [2022-02-20 18:11:29,756 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:29,756 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [724943598] [2022-02-20 18:11:29,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:29,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:29,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:29,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,862 INFO L290 TraceCheckUtils]: 0: Hoare triple {16703#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16638#true} is VALID [2022-02-20 18:11:29,862 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,862 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16638#true} {16638#true} #270#return; {16638#true} is VALID [2022-02-20 18:11:29,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:29,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:29,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:29,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:29,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,927 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,927 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,928 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,928 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,928 INFO L290 TraceCheckUtils]: 0: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,929 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:29,929 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,941 INFO L290 TraceCheckUtils]: 3: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,942 INFO L290 TraceCheckUtils]: 4: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,942 INFO L290 TraceCheckUtils]: 5: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,943 INFO L290 TraceCheckUtils]: 6: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,943 INFO L290 TraceCheckUtils]: 7: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,943 INFO L272 TraceCheckUtils]: 8: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:29,943 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,943 INFO L290 TraceCheckUtils]: 10: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,944 INFO L290 TraceCheckUtils]: 11: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,944 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,944 INFO L290 TraceCheckUtils]: 13: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,945 INFO L290 TraceCheckUtils]: 14: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,945 INFO L290 TraceCheckUtils]: 15: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,946 INFO L290 TraceCheckUtils]: 16: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,946 INFO L290 TraceCheckUtils]: 17: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,946 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,947 INFO L290 TraceCheckUtils]: 0: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:29,947 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,947 INFO L272 TraceCheckUtils]: 2: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,947 INFO L290 TraceCheckUtils]: 3: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,947 INFO L290 TraceCheckUtils]: 4: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:29,948 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,948 INFO L290 TraceCheckUtils]: 6: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,948 INFO L290 TraceCheckUtils]: 7: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,949 INFO L290 TraceCheckUtils]: 8: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,949 INFO L290 TraceCheckUtils]: 9: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,949 INFO L290 TraceCheckUtils]: 10: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,949 INFO L272 TraceCheckUtils]: 11: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:29,949 INFO L290 TraceCheckUtils]: 12: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,949 INFO L290 TraceCheckUtils]: 13: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,950 INFO L290 TraceCheckUtils]: 14: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,950 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,950 INFO L290 TraceCheckUtils]: 16: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,951 INFO L290 TraceCheckUtils]: 17: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,951 INFO L290 TraceCheckUtils]: 18: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,951 INFO L290 TraceCheckUtils]: 19: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,951 INFO L290 TraceCheckUtils]: 20: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,952 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,952 INFO L290 TraceCheckUtils]: 22: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,952 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #268#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,953 INFO L290 TraceCheckUtils]: 0: Hoare triple {16704#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16638#true} is VALID [2022-02-20 18:11:29,953 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,953 INFO L272 TraceCheckUtils]: 3: Hoare triple {16638#true} call processEnvironment__wrappee__methaneQuery(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,953 INFO L290 TraceCheckUtils]: 4: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:29,953 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,954 INFO L272 TraceCheckUtils]: 6: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,954 INFO L290 TraceCheckUtils]: 7: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,954 INFO L290 TraceCheckUtils]: 8: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:29,954 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,955 INFO L290 TraceCheckUtils]: 10: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,955 INFO L290 TraceCheckUtils]: 11: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,955 INFO L290 TraceCheckUtils]: 12: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,955 INFO L290 TraceCheckUtils]: 13: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,956 INFO L290 TraceCheckUtils]: 14: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,956 INFO L272 TraceCheckUtils]: 15: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:29,956 INFO L290 TraceCheckUtils]: 16: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,956 INFO L290 TraceCheckUtils]: 17: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,956 INFO L290 TraceCheckUtils]: 18: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,957 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,957 INFO L290 TraceCheckUtils]: 20: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,957 INFO L290 TraceCheckUtils]: 21: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,957 INFO L290 TraceCheckUtils]: 22: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,958 INFO L290 TraceCheckUtils]: 23: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,958 INFO L290 TraceCheckUtils]: 24: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,958 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,959 INFO L290 TraceCheckUtils]: 26: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,959 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #268#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,959 INFO L290 TraceCheckUtils]: 28: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,960 INFO L290 TraceCheckUtils]: 29: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,960 INFO L290 TraceCheckUtils]: 30: Hoare triple {16678#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,960 INFO L290 TraceCheckUtils]: 31: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,960 INFO L290 TraceCheckUtils]: 32: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,961 INFO L290 TraceCheckUtils]: 33: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,961 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #274#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-02-20 18:11:29,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,965 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,965 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,966 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,966 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #262#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-02-20 18:11:29,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:29,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:29,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,977 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {16638#true} {16638#true} #282#return; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 0: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume !(0 == ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L272 TraceCheckUtils]: 2: Hoare triple {16638#true} call processEnvironment__wrappee__base(); {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 3: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16638#true} {16638#true} #282#return; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {16638#true} {16638#true} #286#return; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 0: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 3: Hoare triple {16638#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 4: Hoare triple {16638#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {16638#true} is VALID [2022-02-20 18:11:29,978 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 6: Hoare triple {16638#true} assume !(0 != ~tmp~1#1); {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L272 TraceCheckUtils]: 7: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 8: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} assume !(0 == ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L272 TraceCheckUtils]: 10: Hoare triple {16638#true} call processEnvironment__wrappee__base(); {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 11: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {16638#true} {16638#true} #282#return; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 13: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16638#true} {16638#true} #286#return; {16638#true} is VALID [2022-02-20 18:11:29,979 INFO L290 TraceCheckUtils]: 15: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #266#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 3: Hoare triple {16638#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 4: Hoare triple {16638#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 6: Hoare triple {16638#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 7: Hoare triple {16638#true} assume !false; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 8: Hoare triple {16638#true} assume test_~splverifierCounter~0#1 < 4; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16638#true} is VALID [2022-02-20 18:11:29,980 INFO L290 TraceCheckUtils]: 10: Hoare triple {16638#true} assume 0 != test_~tmp~6#1; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L272 TraceCheckUtils]: 11: Hoare triple {16638#true} call waterRise(); {16703#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 12: Hoare triple {16703#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 13: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16638#true} {16638#true} #270#return; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 15: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 16: Hoare triple {16638#true} assume !(0 != test_~tmp___0~2#1); {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 17: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 18: Hoare triple {16638#true} assume 0 != test_~tmp___2~0#1; {16638#true} is VALID [2022-02-20 18:11:29,981 INFO L272 TraceCheckUtils]: 19: Hoare triple {16638#true} call timeShift(); {16704#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:29,981 INFO L290 TraceCheckUtils]: 20: Hoare triple {16704#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 21: Hoare triple {16638#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 22: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L272 TraceCheckUtils]: 23: Hoare triple {16638#true} call processEnvironment__wrappee__methaneQuery(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 24: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 25: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L272 TraceCheckUtils]: 26: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 27: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,982 INFO L290 TraceCheckUtils]: 28: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:29,983 INFO L290 TraceCheckUtils]: 29: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,983 INFO L290 TraceCheckUtils]: 30: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,983 INFO L290 TraceCheckUtils]: 31: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 32: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 33: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 34: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,984 INFO L272 TraceCheckUtils]: 35: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 36: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 37: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,984 INFO L290 TraceCheckUtils]: 38: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,985 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,985 INFO L290 TraceCheckUtils]: 40: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,985 INFO L290 TraceCheckUtils]: 41: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,985 INFO L290 TraceCheckUtils]: 42: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,986 INFO L290 TraceCheckUtils]: 43: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,986 INFO L290 TraceCheckUtils]: 44: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,986 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,987 INFO L290 TraceCheckUtils]: 46: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,987 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #268#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,987 INFO L290 TraceCheckUtils]: 48: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,987 INFO L290 TraceCheckUtils]: 49: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,988 INFO L290 TraceCheckUtils]: 50: Hoare triple {16678#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,988 INFO L290 TraceCheckUtils]: 51: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,988 INFO L290 TraceCheckUtils]: 52: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,988 INFO L290 TraceCheckUtils]: 53: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,989 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #274#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,989 INFO L290 TraceCheckUtils]: 55: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !false; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,989 INFO L290 TraceCheckUtils]: 56: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,990 INFO L290 TraceCheckUtils]: 57: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,990 INFO L290 TraceCheckUtils]: 58: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,990 INFO L290 TraceCheckUtils]: 59: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,990 INFO L290 TraceCheckUtils]: 60: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,991 INFO L290 TraceCheckUtils]: 61: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,991 INFO L290 TraceCheckUtils]: 62: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,991 INFO L272 TraceCheckUtils]: 63: Hoare triple {16678#(<= 2 ~waterLevel~0)} call timeShift(); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,991 INFO L290 TraceCheckUtils]: 64: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,992 INFO L290 TraceCheckUtils]: 65: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,992 INFO L290 TraceCheckUtils]: 66: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,992 INFO L290 TraceCheckUtils]: 67: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,993 INFO L290 TraceCheckUtils]: 68: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,993 INFO L272 TraceCheckUtils]: 69: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:29,993 INFO L290 TraceCheckUtils]: 70: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:29,993 INFO L290 TraceCheckUtils]: 71: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:29,993 INFO L290 TraceCheckUtils]: 72: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,993 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #262#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 74: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 75: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~2#1); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,994 INFO L272 TraceCheckUtils]: 76: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__methaneQuery(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 77: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 78: Hoare triple {16638#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16638#true} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 79: Hoare triple {16638#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {16638#true} is VALID [2022-02-20 18:11:29,994 INFO L290 TraceCheckUtils]: 80: Hoare triple {16638#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 81: Hoare triple {16638#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 82: Hoare triple {16638#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 83: Hoare triple {16638#true} assume !(0 != ~tmp~1#1); {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L272 TraceCheckUtils]: 84: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 85: Hoare triple {16729#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 86: Hoare triple {16638#true} assume !(0 == ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L272 TraceCheckUtils]: 87: Hoare triple {16638#true} call processEnvironment__wrappee__base(); {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 88: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {16638#true} {16638#true} #282#return; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 90: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {16638#true} {16638#true} #286#return; {16638#true} is VALID [2022-02-20 18:11:29,995 INFO L290 TraceCheckUtils]: 92: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:29,996 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #266#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,996 INFO L290 TraceCheckUtils]: 94: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:29,996 INFO L290 TraceCheckUtils]: 95: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16701#(not (= |timeShift_getWaterLevel_#res#1| 0))} is VALID [2022-02-20 18:11:29,997 INFO L290 TraceCheckUtils]: 96: Hoare triple {16701#(not (= |timeShift_getWaterLevel_#res#1| 0))} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {16702#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0))} is VALID [2022-02-20 18:11:29,997 INFO L290 TraceCheckUtils]: 97: Hoare triple {16702#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1| 0))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {16639#false} is VALID [2022-02-20 18:11:29,997 INFO L290 TraceCheckUtils]: 98: Hoare triple {16639#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {16639#false} is VALID [2022-02-20 18:11:29,997 INFO L290 TraceCheckUtils]: 99: Hoare triple {16639#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {16639#false} is VALID [2022-02-20 18:11:29,997 INFO L290 TraceCheckUtils]: 100: Hoare triple {16639#false} assume !false; {16639#false} is VALID [2022-02-20 18:11:29,997 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-02-20 18:11:29,998 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:29,998 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [724943598] [2022-02-20 18:11:29,998 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [724943598] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:29,998 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1071896845] [2022-02-20 18:11:29,998 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-20 18:11:29,998 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:29,998 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:29,999 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:30,003 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:11:30,159 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-20 18:11:30,160 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-20 18:11:30,162 INFO L263 TraceCheckSpWp]: Trace formula consists of 483 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:11:30,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:30,206 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:30,622 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 3: Hoare triple {16638#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 4: Hoare triple {16638#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {16638#true} is VALID [2022-02-20 18:11:30,635 INFO L290 TraceCheckUtils]: 6: Hoare triple {16638#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 7: Hoare triple {16638#true} assume !false; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 8: Hoare triple {16638#true} assume test_~splverifierCounter~0#1 < 4; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 10: Hoare triple {16638#true} assume 0 != test_~tmp~6#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L272 TraceCheckUtils]: 11: Hoare triple {16638#true} call waterRise(); {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 12: Hoare triple {16638#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 13: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16638#true} {16638#true} #270#return; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 15: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 16: Hoare triple {16638#true} assume !(0 != test_~tmp___0~2#1); {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 17: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 18: Hoare triple {16638#true} assume 0 != test_~tmp___2~0#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L272 TraceCheckUtils]: 19: Hoare triple {16638#true} call timeShift(); {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 20: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 21: Hoare triple {16638#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16638#true} is VALID [2022-02-20 18:11:30,636 INFO L290 TraceCheckUtils]: 22: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L272 TraceCheckUtils]: 23: Hoare triple {16638#true} call processEnvironment__wrappee__methaneQuery(); {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L290 TraceCheckUtils]: 24: Hoare triple {16638#true} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L290 TraceCheckUtils]: 25: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L272 TraceCheckUtils]: 26: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L290 TraceCheckUtils]: 27: Hoare triple {16638#true} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L290 TraceCheckUtils]: 28: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:30,637 INFO L290 TraceCheckUtils]: 29: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,638 INFO L290 TraceCheckUtils]: 30: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,638 INFO L290 TraceCheckUtils]: 31: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,638 INFO L290 TraceCheckUtils]: 32: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,639 INFO L290 TraceCheckUtils]: 33: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,639 INFO L290 TraceCheckUtils]: 34: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,640 INFO L272 TraceCheckUtils]: 35: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,640 INFO L290 TraceCheckUtils]: 36: Hoare triple {16678#(<= 2 ~waterLevel~0)} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,640 INFO L290 TraceCheckUtils]: 37: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,641 INFO L290 TraceCheckUtils]: 38: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,641 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,642 INFO L290 TraceCheckUtils]: 40: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,642 INFO L290 TraceCheckUtils]: 41: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,642 INFO L290 TraceCheckUtils]: 42: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,643 INFO L290 TraceCheckUtils]: 43: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,643 INFO L290 TraceCheckUtils]: 44: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,643 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,644 INFO L290 TraceCheckUtils]: 46: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,644 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #268#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,644 INFO L290 TraceCheckUtils]: 48: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,645 INFO L290 TraceCheckUtils]: 49: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,645 INFO L290 TraceCheckUtils]: 50: Hoare triple {16678#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,645 INFO L290 TraceCheckUtils]: 51: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,646 INFO L290 TraceCheckUtils]: 52: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,646 INFO L290 TraceCheckUtils]: 53: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,647 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #274#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,647 INFO L290 TraceCheckUtils]: 55: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !false; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,647 INFO L290 TraceCheckUtils]: 56: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,648 INFO L290 TraceCheckUtils]: 57: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,648 INFO L290 TraceCheckUtils]: 58: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,648 INFO L290 TraceCheckUtils]: 59: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,649 INFO L290 TraceCheckUtils]: 60: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,649 INFO L290 TraceCheckUtils]: 61: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,649 INFO L290 TraceCheckUtils]: 62: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,650 INFO L272 TraceCheckUtils]: 63: Hoare triple {16678#(<= 2 ~waterLevel~0)} call timeShift(); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,650 INFO L290 TraceCheckUtils]: 64: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,651 INFO L290 TraceCheckUtils]: 65: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,651 INFO L290 TraceCheckUtils]: 66: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,652 INFO L290 TraceCheckUtils]: 67: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,652 INFO L290 TraceCheckUtils]: 68: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,652 INFO L272 TraceCheckUtils]: 69: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,653 INFO L290 TraceCheckUtils]: 70: Hoare triple {16679#(<= 1 ~waterLevel~0)} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,653 INFO L290 TraceCheckUtils]: 71: Hoare triple {16679#(<= 1 ~waterLevel~0)} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,654 INFO L290 TraceCheckUtils]: 72: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,654 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {16679#(<= 1 ~waterLevel~0)} {16679#(<= 1 ~waterLevel~0)} #262#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,654 INFO L290 TraceCheckUtils]: 74: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,655 INFO L290 TraceCheckUtils]: 75: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~2#1); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,655 INFO L272 TraceCheckUtils]: 76: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__methaneQuery(); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,656 INFO L290 TraceCheckUtils]: 77: Hoare triple {16679#(<= 1 ~waterLevel~0)} havoc ~tmp~1#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,656 INFO L290 TraceCheckUtils]: 78: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,656 INFO L290 TraceCheckUtils]: 79: Hoare triple {16679#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,657 INFO L290 TraceCheckUtils]: 80: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,657 INFO L290 TraceCheckUtils]: 81: Hoare triple {16679#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,657 INFO L290 TraceCheckUtils]: 82: Hoare triple {16679#(<= 1 ~waterLevel~0)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,658 INFO L290 TraceCheckUtils]: 83: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume !(0 != ~tmp~1#1); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,658 INFO L272 TraceCheckUtils]: 84: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,658 INFO L290 TraceCheckUtils]: 85: Hoare triple {16679#(<= 1 ~waterLevel~0)} havoc ~tmp~0#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,659 INFO L290 TraceCheckUtils]: 86: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,659 INFO L272 TraceCheckUtils]: 87: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__base(); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,660 INFO L290 TraceCheckUtils]: 88: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,660 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {16679#(<= 1 ~waterLevel~0)} {16679#(<= 1 ~waterLevel~0)} #282#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,660 INFO L290 TraceCheckUtils]: 90: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,661 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {16679#(<= 1 ~waterLevel~0)} {16679#(<= 1 ~waterLevel~0)} #286#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,661 INFO L290 TraceCheckUtils]: 92: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,661 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {16679#(<= 1 ~waterLevel~0)} {16679#(<= 1 ~waterLevel~0)} #266#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,662 INFO L290 TraceCheckUtils]: 94: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:30,662 INFO L290 TraceCheckUtils]: 95: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {17050#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:30,663 INFO L290 TraceCheckUtils]: 96: Hoare triple {17050#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {17054#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)} is VALID [2022-02-20 18:11:30,664 INFO L290 TraceCheckUtils]: 97: Hoare triple {17054#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {16639#false} is VALID [2022-02-20 18:11:30,664 INFO L290 TraceCheckUtils]: 98: Hoare triple {16639#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {16639#false} is VALID [2022-02-20 18:11:30,664 INFO L290 TraceCheckUtils]: 99: Hoare triple {16639#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {16639#false} is VALID [2022-02-20 18:11:30,664 INFO L290 TraceCheckUtils]: 100: Hoare triple {16639#false} assume !false; {16639#false} is VALID [2022-02-20 18:11:30,665 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 16 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:11:30,665 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:11:31,125 INFO L290 TraceCheckUtils]: 100: Hoare triple {16639#false} assume !false; {16639#false} is VALID [2022-02-20 18:11:31,126 INFO L290 TraceCheckUtils]: 99: Hoare triple {16639#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {16639#false} is VALID [2022-02-20 18:11:31,126 INFO L290 TraceCheckUtils]: 98: Hoare triple {16639#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {16639#false} is VALID [2022-02-20 18:11:31,126 INFO L290 TraceCheckUtils]: 97: Hoare triple {17054#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {16639#false} is VALID [2022-02-20 18:11:31,127 INFO L290 TraceCheckUtils]: 96: Hoare triple {17050#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {17054#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)} is VALID [2022-02-20 18:11:31,127 INFO L290 TraceCheckUtils]: 95: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {17050#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:31,127 INFO L290 TraceCheckUtils]: 94: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,128 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #266#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,139 INFO L290 TraceCheckUtils]: 92: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,139 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {16638#true} {16638#true} #286#return; {16638#true} is VALID [2022-02-20 18:11:31,139 INFO L290 TraceCheckUtils]: 90: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,139 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {16638#true} {16638#true} #282#return; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 88: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L272 TraceCheckUtils]: 87: Hoare triple {16638#true} call processEnvironment__wrappee__base(); {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 86: Hoare triple {16638#true} assume !(0 == ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 85: Hoare triple {16638#true} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L272 TraceCheckUtils]: 84: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 83: Hoare triple {16638#true} assume !(0 != ~tmp~1#1); {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 82: Hoare triple {16638#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 81: Hoare triple {16638#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 80: Hoare triple {16638#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 79: Hoare triple {16638#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 78: Hoare triple {16638#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L290 TraceCheckUtils]: 77: Hoare triple {16638#true} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:31,140 INFO L272 TraceCheckUtils]: 76: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment__wrappee__methaneQuery(); {16638#true} is VALID [2022-02-20 18:11:31,141 INFO L290 TraceCheckUtils]: 75: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~2#1); {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,141 INFO L290 TraceCheckUtils]: 74: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,142 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {16638#true} {16679#(<= 1 ~waterLevel~0)} #262#return; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,142 INFO L290 TraceCheckUtils]: 72: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,142 INFO L290 TraceCheckUtils]: 71: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:31,142 INFO L290 TraceCheckUtils]: 70: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:31,142 INFO L272 TraceCheckUtils]: 69: Hoare triple {16679#(<= 1 ~waterLevel~0)} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:31,142 INFO L290 TraceCheckUtils]: 68: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,142 INFO L290 TraceCheckUtils]: 67: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,143 INFO L290 TraceCheckUtils]: 66: Hoare triple {16679#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,143 INFO L290 TraceCheckUtils]: 65: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16679#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,144 INFO L290 TraceCheckUtils]: 64: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,144 INFO L272 TraceCheckUtils]: 63: Hoare triple {16678#(<= 2 ~waterLevel~0)} call timeShift(); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,144 INFO L290 TraceCheckUtils]: 62: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,145 INFO L290 TraceCheckUtils]: 61: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,146 INFO L290 TraceCheckUtils]: 60: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,146 INFO L290 TraceCheckUtils]: 59: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,146 INFO L290 TraceCheckUtils]: 58: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,146 INFO L290 TraceCheckUtils]: 57: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,147 INFO L290 TraceCheckUtils]: 56: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,147 INFO L290 TraceCheckUtils]: 55: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !false; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,147 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #274#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,171 INFO L290 TraceCheckUtils]: 53: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,172 INFO L290 TraceCheckUtils]: 52: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,172 INFO L290 TraceCheckUtils]: 51: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,173 INFO L290 TraceCheckUtils]: 50: Hoare triple {16678#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,173 INFO L290 TraceCheckUtils]: 49: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,173 INFO L290 TraceCheckUtils]: 48: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,174 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #268#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,174 INFO L290 TraceCheckUtils]: 46: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,174 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {16678#(<= 2 ~waterLevel~0)} {16638#true} #288#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,175 INFO L290 TraceCheckUtils]: 44: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,175 INFO L290 TraceCheckUtils]: 43: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,176 INFO L290 TraceCheckUtils]: 42: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,176 INFO L290 TraceCheckUtils]: 41: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,176 INFO L290 TraceCheckUtils]: 40: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,177 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {16638#true} {16678#(<= 2 ~waterLevel~0)} #278#return; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,177 INFO L290 TraceCheckUtils]: 38: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,177 INFO L290 TraceCheckUtils]: 37: Hoare triple {16638#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {16638#true} is VALID [2022-02-20 18:11:31,177 INFO L290 TraceCheckUtils]: 36: Hoare triple {16638#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {16638#true} is VALID [2022-02-20 18:11:31,177 INFO L272 TraceCheckUtils]: 35: Hoare triple {16678#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {16638#true} is VALID [2022-02-20 18:11:31,177 INFO L290 TraceCheckUtils]: 34: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,178 INFO L290 TraceCheckUtils]: 33: Hoare triple {16678#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,178 INFO L290 TraceCheckUtils]: 32: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,178 INFO L290 TraceCheckUtils]: 31: Hoare triple {16678#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,178 INFO L290 TraceCheckUtils]: 30: Hoare triple {16678#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 29: Hoare triple {16638#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {16678#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 28: Hoare triple {16638#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 27: Hoare triple {16638#true} havoc ~tmp~0#1; {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L272 TraceCheckUtils]: 26: Hoare triple {16638#true} call processEnvironment__wrappee__highWaterSensor(); {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 25: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 24: Hoare triple {16638#true} havoc ~tmp~1#1; {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L272 TraceCheckUtils]: 23: Hoare triple {16638#true} call processEnvironment__wrappee__methaneQuery(); {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 22: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 21: Hoare triple {16638#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {16638#true} is VALID [2022-02-20 18:11:31,179 INFO L290 TraceCheckUtils]: 20: Hoare triple {16638#true} assume !(0 != ~pumpRunning~0); {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L272 TraceCheckUtils]: 19: Hoare triple {16638#true} call timeShift(); {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L290 TraceCheckUtils]: 18: Hoare triple {16638#true} assume 0 != test_~tmp___2~0#1; {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L290 TraceCheckUtils]: 17: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L290 TraceCheckUtils]: 16: Hoare triple {16638#true} assume !(0 != test_~tmp___0~2#1); {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L290 TraceCheckUtils]: 15: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {16638#true} {16638#true} #270#return; {16638#true} is VALID [2022-02-20 18:11:31,180 INFO L290 TraceCheckUtils]: 13: Hoare triple {16638#true} assume true; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 12: Hoare triple {16638#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L272 TraceCheckUtils]: 11: Hoare triple {16638#true} call waterRise(); {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 10: Hoare triple {16638#true} assume 0 != test_~tmp~6#1; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 9: Hoare triple {16638#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 8: Hoare triple {16638#true} assume test_~splverifierCounter~0#1 < 4; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 7: Hoare triple {16638#true} assume !false; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 6: Hoare triple {16638#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 5: Hoare triple {16638#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 4: Hoare triple {16638#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {16638#true} is VALID [2022-02-20 18:11:31,184 INFO L290 TraceCheckUtils]: 3: Hoare triple {16638#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16638#true} is VALID [2022-02-20 18:11:31,185 INFO L290 TraceCheckUtils]: 2: Hoare triple {16638#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16638#true} is VALID [2022-02-20 18:11:31,185 INFO L290 TraceCheckUtils]: 1: Hoare triple {16638#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {16638#true} is VALID [2022-02-20 18:11:31,185 INFO L290 TraceCheckUtils]: 0: Hoare triple {16638#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {16638#true} is VALID [2022-02-20 18:11:31,185 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-02-20 18:11:31,185 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1071896845] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:11:31,185 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:11:31,185 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 11 [2022-02-20 18:11:31,185 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1460616125] [2022-02-20 18:11:31,185 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:11:31,186 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 101 [2022-02-20 18:11:31,192 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:31,192 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:31,297 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 137 edges. 137 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:31,298 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-02-20 18:11:31,298 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:31,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-02-20 18:11:31,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-02-20 18:11:31,299 INFO L87 Difference]: Start difference. First operand 404 states and 519 transitions. Second operand has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:33,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:33,541 INFO L93 Difference]: Finished difference Result 975 states and 1307 transitions. [2022-02-20 18:11:33,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-02-20 18:11:33,542 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 101 [2022-02-20 18:11:33,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:33,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:33,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 507 transitions. [2022-02-20 18:11:33,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:33,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 507 transitions. [2022-02-20 18:11:33,558 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 31 states and 507 transitions. [2022-02-20 18:11:33,950 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 507 edges. 507 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:33,980 INFO L225 Difference]: With dead ends: 975 [2022-02-20 18:11:33,981 INFO L226 Difference]: Without dead ends: 621 [2022-02-20 18:11:33,983 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 220 SyntacticMatches, 5 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=279, Invalid=843, Unknown=0, NotChecked=0, Total=1122 [2022-02-20 18:11:33,983 INFO L933 BasicCegarLoop]: 142 mSDtfsCounter, 297 mSDsluCounter, 498 mSDsCounter, 0 mSdLazyCounter, 764 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 640 SdHoareTripleChecker+Invalid, 896 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 764 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:33,984 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [303 Valid, 640 Invalid, 896 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 764 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-02-20 18:11:33,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 621 states. [2022-02-20 18:11:34,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 621 to 563. [2022-02-20 18:11:34,277 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:34,291 INFO L82 GeneralOperation]: Start isEquivalent. First operand 621 states. Second operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) [2022-02-20 18:11:34,292 INFO L74 IsIncluded]: Start isIncluded. First operand 621 states. Second operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) [2022-02-20 18:11:34,293 INFO L87 Difference]: Start difference. First operand 621 states. Second operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) [2022-02-20 18:11:34,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:34,324 INFO L93 Difference]: Finished difference Result 621 states and 819 transitions. [2022-02-20 18:11:34,324 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 819 transitions. [2022-02-20 18:11:34,326 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:34,326 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:34,344 INFO L74 IsIncluded]: Start isIncluded. First operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) Second operand 621 states. [2022-02-20 18:11:34,345 INFO L87 Difference]: Start difference. First operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) Second operand 621 states. [2022-02-20 18:11:34,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:34,379 INFO L93 Difference]: Finished difference Result 621 states and 819 transitions. [2022-02-20 18:11:34,379 INFO L276 IsEmpty]: Start isEmpty. Operand 621 states and 819 transitions. [2022-02-20 18:11:34,381 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:34,381 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:34,381 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:34,381 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:34,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 563 states, 426 states have (on average 1.2253521126760563) internal successors, (522), 453 states have internal predecessors, (522), 70 states have call successors, (70), 61 states have call predecessors, (70), 66 states have return successors, (139), 64 states have call predecessors, (139), 70 states have call successors, (139) [2022-02-20 18:11:34,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 563 states to 563 states and 731 transitions. [2022-02-20 18:11:34,417 INFO L78 Accepts]: Start accepts. Automaton has 563 states and 731 transitions. Word has length 101 [2022-02-20 18:11:34,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:34,418 INFO L470 AbstractCegarLoop]: Abstraction has 563 states and 731 transitions. [2022-02-20 18:11:34,418 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:34,418 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 731 transitions. [2022-02-20 18:11:34,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-02-20 18:11:34,420 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:34,420 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:34,463 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:34,640 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:11:34,640 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:34,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:34,641 INFO L85 PathProgramCache]: Analyzing trace with hash -879070667, now seen corresponding path program 3 times [2022-02-20 18:11:34,641 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:34,641 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1831211036] [2022-02-20 18:11:34,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:34,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:34,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:34,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,739 INFO L290 TraceCheckUtils]: 0: Hoare triple {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20823#true} is VALID [2022-02-20 18:11:34,740 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,740 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20823#true} {20823#true} #270#return; {20823#true} is VALID [2022-02-20 18:11:34,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:34,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:34,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:34,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:34,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,805 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,805 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,805 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,806 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20823#true} {20863#(<= 2 ~waterLevel~0)} #278#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,806 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,806 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:34,807 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,807 INFO L290 TraceCheckUtils]: 3: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,807 INFO L290 TraceCheckUtils]: 4: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,808 INFO L290 TraceCheckUtils]: 5: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,808 INFO L290 TraceCheckUtils]: 6: Hoare triple {20863#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,808 INFO L290 TraceCheckUtils]: 7: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,809 INFO L272 TraceCheckUtils]: 8: Hoare triple {20863#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:34,809 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,809 INFO L290 TraceCheckUtils]: 10: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,809 INFO L290 TraceCheckUtils]: 11: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,810 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {20823#true} {20863#(<= 2 ~waterLevel~0)} #278#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,810 INFO L290 TraceCheckUtils]: 13: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,810 INFO L290 TraceCheckUtils]: 14: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,811 INFO L290 TraceCheckUtils]: 15: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,811 INFO L290 TraceCheckUtils]: 16: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,811 INFO L290 TraceCheckUtils]: 17: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,812 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #288#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,813 INFO L272 TraceCheckUtils]: 2: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,813 INFO L290 TraceCheckUtils]: 3: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,813 INFO L290 TraceCheckUtils]: 4: Hoare triple {20823#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:34,813 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,813 INFO L290 TraceCheckUtils]: 6: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,814 INFO L290 TraceCheckUtils]: 7: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,814 INFO L290 TraceCheckUtils]: 8: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,814 INFO L290 TraceCheckUtils]: 9: Hoare triple {20863#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,815 INFO L290 TraceCheckUtils]: 10: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,815 INFO L272 TraceCheckUtils]: 11: Hoare triple {20863#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:34,815 INFO L290 TraceCheckUtils]: 12: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,815 INFO L290 TraceCheckUtils]: 13: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,815 INFO L290 TraceCheckUtils]: 14: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,815 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20823#true} {20863#(<= 2 ~waterLevel~0)} #278#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,816 INFO L290 TraceCheckUtils]: 16: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,816 INFO L290 TraceCheckUtils]: 17: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,816 INFO L290 TraceCheckUtils]: 18: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,816 INFO L290 TraceCheckUtils]: 19: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,817 INFO L290 TraceCheckUtils]: 20: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,817 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #288#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,817 INFO L290 TraceCheckUtils]: 22: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,818 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #268#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,818 INFO L290 TraceCheckUtils]: 0: Hoare triple {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,818 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20823#true} is VALID [2022-02-20 18:11:34,818 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,818 INFO L272 TraceCheckUtils]: 3: Hoare triple {20823#true} call processEnvironment__wrappee__methaneQuery(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,818 INFO L290 TraceCheckUtils]: 4: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,819 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,819 INFO L272 TraceCheckUtils]: 6: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,819 INFO L290 TraceCheckUtils]: 7: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,819 INFO L290 TraceCheckUtils]: 8: Hoare triple {20823#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:34,820 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,820 INFO L290 TraceCheckUtils]: 10: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,820 INFO L290 TraceCheckUtils]: 11: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,821 INFO L290 TraceCheckUtils]: 12: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,821 INFO L290 TraceCheckUtils]: 13: Hoare triple {20863#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,821 INFO L290 TraceCheckUtils]: 14: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,821 INFO L272 TraceCheckUtils]: 15: Hoare triple {20863#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:34,822 INFO L290 TraceCheckUtils]: 16: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,822 INFO L290 TraceCheckUtils]: 17: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,822 INFO L290 TraceCheckUtils]: 18: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,822 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {20823#true} {20863#(<= 2 ~waterLevel~0)} #278#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,823 INFO L290 TraceCheckUtils]: 20: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,823 INFO L290 TraceCheckUtils]: 21: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,823 INFO L290 TraceCheckUtils]: 22: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,824 INFO L290 TraceCheckUtils]: 23: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,824 INFO L290 TraceCheckUtils]: 24: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,825 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #288#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,826 INFO L290 TraceCheckUtils]: 26: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,826 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #268#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,827 INFO L290 TraceCheckUtils]: 28: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,827 INFO L290 TraceCheckUtils]: 29: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,827 INFO L290 TraceCheckUtils]: 30: Hoare triple {20863#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,827 INFO L290 TraceCheckUtils]: 31: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,828 INFO L290 TraceCheckUtils]: 32: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,828 INFO L290 TraceCheckUtils]: 33: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,828 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #274#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:34,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-02-20 18:11:34,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-02-20 18:11:34,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,874 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,874 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,874 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,875 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20823#true} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #262#return; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:11:34,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:34,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:34,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,944 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L272 TraceCheckUtils]: 2: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L290 TraceCheckUtils]: 3: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,945 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,946 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,946 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {20823#true} {20997#(= ~waterLevel~0 0)} #286#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,946 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,947 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} is VALID [2022-02-20 18:11:34,948 INFO L290 TraceCheckUtils]: 2: Hoare triple {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:34,948 INFO L290 TraceCheckUtils]: 3: Hoare triple {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,949 INFO L290 TraceCheckUtils]: 4: Hoare triple {20997#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,949 INFO L290 TraceCheckUtils]: 5: Hoare triple {20997#(= ~waterLevel~0 0)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,949 INFO L290 TraceCheckUtils]: 6: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != ~tmp~1#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,950 INFO L272 TraceCheckUtils]: 7: Hoare triple {20997#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,950 INFO L290 TraceCheckUtils]: 8: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,950 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,950 INFO L272 TraceCheckUtils]: 10: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:34,950 INFO L290 TraceCheckUtils]: 11: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,950 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,951 INFO L290 TraceCheckUtils]: 13: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,951 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {20823#true} {20997#(= ~waterLevel~0 0)} #286#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,951 INFO L290 TraceCheckUtils]: 15: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,952 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #266#return; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,952 INFO L290 TraceCheckUtils]: 0: Hoare triple {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:34,953 INFO L290 TraceCheckUtils]: 1: Hoare triple {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,953 INFO L290 TraceCheckUtils]: 2: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,953 INFO L290 TraceCheckUtils]: 3: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,954 INFO L290 TraceCheckUtils]: 4: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,954 INFO L272 TraceCheckUtils]: 5: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:34,954 INFO L290 TraceCheckUtils]: 6: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,954 INFO L290 TraceCheckUtils]: 7: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,954 INFO L290 TraceCheckUtils]: 8: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,955 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {20823#true} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #262#return; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,955 INFO L290 TraceCheckUtils]: 10: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,955 INFO L290 TraceCheckUtils]: 11: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume !(0 != processEnvironment_~tmp~2#1); {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:34,956 INFO L272 TraceCheckUtils]: 12: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} call processEnvironment__wrappee__methaneQuery(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,956 INFO L290 TraceCheckUtils]: 13: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,957 INFO L290 TraceCheckUtils]: 14: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} is VALID [2022-02-20 18:11:34,957 INFO L290 TraceCheckUtils]: 15: Hoare triple {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:34,958 INFO L290 TraceCheckUtils]: 16: Hoare triple {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,958 INFO L290 TraceCheckUtils]: 17: Hoare triple {20997#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,958 INFO L290 TraceCheckUtils]: 18: Hoare triple {20997#(= ~waterLevel~0 0)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,958 INFO L290 TraceCheckUtils]: 19: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != ~tmp~1#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,959 INFO L272 TraceCheckUtils]: 20: Hoare triple {20997#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,959 INFO L290 TraceCheckUtils]: 21: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,959 INFO L290 TraceCheckUtils]: 22: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,959 INFO L272 TraceCheckUtils]: 23: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:34,960 INFO L290 TraceCheckUtils]: 24: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,960 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,960 INFO L290 TraceCheckUtils]: 26: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,960 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {20823#true} {20997#(= ~waterLevel~0 0)} #286#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,960 INFO L290 TraceCheckUtils]: 28: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:34,961 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #266#return; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,961 INFO L290 TraceCheckUtils]: 30: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,962 INFO L290 TraceCheckUtils]: 31: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,962 INFO L290 TraceCheckUtils]: 32: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,962 INFO L290 TraceCheckUtils]: 33: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,963 INFO L290 TraceCheckUtils]: 34: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,963 INFO L290 TraceCheckUtils]: 35: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:34,963 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {20994#(<= |old(~waterLevel~0)| 1)} {20863#(<= 2 ~waterLevel~0)} #274#return; {20824#false} is VALID [2022-02-20 18:11:34,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-02-20 18:11:34,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,967 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:34,968 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:34,968 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,968 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20823#true} {20824#false} #262#return; {20824#false} is VALID [2022-02-20 18:11:34,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-02-20 18:11:34,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:34,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:34,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,979 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L272 TraceCheckUtils]: 2: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L290 TraceCheckUtils]: 3: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,980 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {20823#true} {20823#true} #286#return; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L290 TraceCheckUtils]: 0: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L290 TraceCheckUtils]: 3: Hoare triple {20823#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20823#true} is VALID [2022-02-20 18:11:34,981 INFO L290 TraceCheckUtils]: 4: Hoare triple {20823#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20823#true} is VALID [2022-02-20 18:11:34,982 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20823#true} is VALID [2022-02-20 18:11:34,982 INFO L290 TraceCheckUtils]: 6: Hoare triple {20823#true} assume !(0 != ~tmp~1#1); {20823#true} is VALID [2022-02-20 18:11:34,982 INFO L272 TraceCheckUtils]: 7: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,982 INFO L290 TraceCheckUtils]: 8: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L272 TraceCheckUtils]: 10: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L290 TraceCheckUtils]: 11: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L290 TraceCheckUtils]: 13: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,983 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {20823#true} {20823#true} #286#return; {20823#true} is VALID [2022-02-20 18:11:34,984 INFO L290 TraceCheckUtils]: 15: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,984 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {20823#true} {20824#false} #266#return; {20824#false} is VALID [2022-02-20 18:11:34,984 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {20823#true} is VALID [2022-02-20 18:11:34,984 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {20823#true} is VALID [2022-02-20 18:11:34,984 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20823#true} is VALID [2022-02-20 18:11:34,984 INFO L290 TraceCheckUtils]: 3: Hoare triple {20823#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 4: Hoare triple {20823#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 6: Hoare triple {20823#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 7: Hoare triple {20823#true} assume !false; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 8: Hoare triple {20823#true} assume test_~splverifierCounter~0#1 < 4; {20823#true} is VALID [2022-02-20 18:11:34,985 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20823#true} is VALID [2022-02-20 18:11:34,986 INFO L290 TraceCheckUtils]: 10: Hoare triple {20823#true} assume 0 != test_~tmp~6#1; {20823#true} is VALID [2022-02-20 18:11:34,986 INFO L272 TraceCheckUtils]: 11: Hoare triple {20823#true} call waterRise(); {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:34,986 INFO L290 TraceCheckUtils]: 12: Hoare triple {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L290 TraceCheckUtils]: 13: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {20823#true} {20823#true} #270#return; {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L290 TraceCheckUtils]: 15: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L290 TraceCheckUtils]: 16: Hoare triple {20823#true} assume !(0 != test_~tmp___0~2#1); {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L290 TraceCheckUtils]: 17: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20823#true} is VALID [2022-02-20 18:11:34,987 INFO L290 TraceCheckUtils]: 18: Hoare triple {20823#true} assume 0 != test_~tmp___2~0#1; {20823#true} is VALID [2022-02-20 18:11:34,988 INFO L272 TraceCheckUtils]: 19: Hoare triple {20823#true} call timeShift(); {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:34,988 INFO L290 TraceCheckUtils]: 20: Hoare triple {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,988 INFO L290 TraceCheckUtils]: 21: Hoare triple {20823#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20823#true} is VALID [2022-02-20 18:11:34,988 INFO L290 TraceCheckUtils]: 22: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,998 INFO L272 TraceCheckUtils]: 23: Hoare triple {20823#true} call processEnvironment__wrappee__methaneQuery(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,999 INFO L290 TraceCheckUtils]: 24: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:34,999 INFO L290 TraceCheckUtils]: 25: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:34,999 INFO L272 TraceCheckUtils]: 26: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,000 INFO L290 TraceCheckUtils]: 27: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:35,000 INFO L290 TraceCheckUtils]: 28: Hoare triple {20823#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:35,000 INFO L290 TraceCheckUtils]: 29: Hoare triple {20823#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,001 INFO L290 TraceCheckUtils]: 30: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,001 INFO L290 TraceCheckUtils]: 31: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,001 INFO L290 TraceCheckUtils]: 32: Hoare triple {20863#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,001 INFO L290 TraceCheckUtils]: 33: Hoare triple {20863#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,002 INFO L290 TraceCheckUtils]: 34: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,002 INFO L272 TraceCheckUtils]: 35: Hoare triple {20863#(<= 2 ~waterLevel~0)} call activatePump_#t~ret8#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:35,002 INFO L290 TraceCheckUtils]: 36: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:35,002 INFO L290 TraceCheckUtils]: 37: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:35,002 INFO L290 TraceCheckUtils]: 38: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,003 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {20823#true} {20863#(<= 2 ~waterLevel~0)} #278#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,003 INFO L290 TraceCheckUtils]: 40: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,003 INFO L290 TraceCheckUtils]: 41: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,004 INFO L290 TraceCheckUtils]: 42: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,004 INFO L290 TraceCheckUtils]: 43: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,004 INFO L290 TraceCheckUtils]: 44: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,005 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #288#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,005 INFO L290 TraceCheckUtils]: 46: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,005 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #268#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,006 INFO L290 TraceCheckUtils]: 48: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,006 INFO L290 TraceCheckUtils]: 49: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,006 INFO L290 TraceCheckUtils]: 50: Hoare triple {20863#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,007 INFO L290 TraceCheckUtils]: 51: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,007 INFO L290 TraceCheckUtils]: 52: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,007 INFO L290 TraceCheckUtils]: 53: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume true; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,008 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {20863#(<= 2 ~waterLevel~0)} {20823#true} #274#return; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,008 INFO L290 TraceCheckUtils]: 55: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !false; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,008 INFO L290 TraceCheckUtils]: 56: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,009 INFO L290 TraceCheckUtils]: 57: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,009 INFO L290 TraceCheckUtils]: 58: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~6#1); {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,009 INFO L290 TraceCheckUtils]: 59: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,010 INFO L290 TraceCheckUtils]: 60: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,010 INFO L290 TraceCheckUtils]: 61: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,010 INFO L290 TraceCheckUtils]: 62: Hoare triple {20863#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {20863#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:35,011 INFO L272 TraceCheckUtils]: 63: Hoare triple {20863#(<= 2 ~waterLevel~0)} call timeShift(); {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:35,011 INFO L290 TraceCheckUtils]: 64: Hoare triple {20923#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:35,011 INFO L290 TraceCheckUtils]: 65: Hoare triple {20922#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,012 INFO L290 TraceCheckUtils]: 66: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume { :end_inline_lowerWaterLevel } true; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,012 INFO L290 TraceCheckUtils]: 67: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,012 INFO L290 TraceCheckUtils]: 68: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume 0 != ~pumpRunning~0; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,013 INFO L272 TraceCheckUtils]: 69: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:35,013 INFO L290 TraceCheckUtils]: 70: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:35,013 INFO L290 TraceCheckUtils]: 71: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:35,013 INFO L290 TraceCheckUtils]: 72: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,013 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {20823#true} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #262#return; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,014 INFO L290 TraceCheckUtils]: 74: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,014 INFO L290 TraceCheckUtils]: 75: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} assume !(0 != processEnvironment_~tmp~2#1); {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} is VALID [2022-02-20 18:11:35,015 INFO L272 TraceCheckUtils]: 76: Hoare triple {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} call processEnvironment__wrappee__methaneQuery(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,015 INFO L290 TraceCheckUtils]: 77: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:35,015 INFO L290 TraceCheckUtils]: 78: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} is VALID [2022-02-20 18:11:35,016 INFO L290 TraceCheckUtils]: 79: Hoare triple {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:35,016 INFO L290 TraceCheckUtils]: 80: Hoare triple {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,017 INFO L290 TraceCheckUtils]: 81: Hoare triple {20997#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,017 INFO L290 TraceCheckUtils]: 82: Hoare triple {20997#(= ~waterLevel~0 0)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,017 INFO L290 TraceCheckUtils]: 83: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != ~tmp~1#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,018 INFO L272 TraceCheckUtils]: 84: Hoare triple {20997#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,018 INFO L290 TraceCheckUtils]: 85: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:35,018 INFO L290 TraceCheckUtils]: 86: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:35,018 INFO L272 TraceCheckUtils]: 87: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:35,018 INFO L290 TraceCheckUtils]: 88: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,018 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:35,019 INFO L290 TraceCheckUtils]: 90: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,019 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {20823#true} {20997#(= ~waterLevel~0 0)} #286#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,019 INFO L290 TraceCheckUtils]: 92: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,020 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20972#(<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))} #266#return; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,020 INFO L290 TraceCheckUtils]: 94: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :end_inline_processEnvironment } true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,020 INFO L290 TraceCheckUtils]: 95: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,021 INFO L290 TraceCheckUtils]: 96: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,021 INFO L290 TraceCheckUtils]: 97: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,021 INFO L290 TraceCheckUtils]: 98: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,022 INFO L290 TraceCheckUtils]: 99: Hoare triple {20994#(<= |old(~waterLevel~0)| 1)} assume true; {20994#(<= |old(~waterLevel~0)| 1)} is VALID [2022-02-20 18:11:35,022 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {20994#(<= |old(~waterLevel~0)| 1)} {20863#(<= 2 ~waterLevel~0)} #274#return; {20824#false} is VALID [2022-02-20 18:11:35,022 INFO L290 TraceCheckUtils]: 101: Hoare triple {20824#false} assume !false; {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 102: Hoare triple {20824#false} assume test_~splverifierCounter~0#1 < 4; {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 103: Hoare triple {20824#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 104: Hoare triple {20824#false} assume !(0 != test_~tmp~6#1); {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 105: Hoare triple {20824#false} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 106: Hoare triple {20824#false} assume !(0 != test_~tmp___0~2#1); {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 107: Hoare triple {20824#false} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20824#false} is VALID [2022-02-20 18:11:35,023 INFO L290 TraceCheckUtils]: 108: Hoare triple {20824#false} assume 0 != test_~tmp___2~0#1; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L272 TraceCheckUtils]: 109: Hoare triple {20824#false} call timeShift(); {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L290 TraceCheckUtils]: 110: Hoare triple {20824#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L290 TraceCheckUtils]: 111: Hoare triple {20824#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L290 TraceCheckUtils]: 112: Hoare triple {20824#false} assume { :end_inline_lowerWaterLevel } true; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L290 TraceCheckUtils]: 113: Hoare triple {20824#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L290 TraceCheckUtils]: 114: Hoare triple {20824#false} assume 0 != ~pumpRunning~0; {20824#false} is VALID [2022-02-20 18:11:35,024 INFO L272 TraceCheckUtils]: 115: Hoare triple {20824#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:35,025 INFO L290 TraceCheckUtils]: 116: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:35,025 INFO L290 TraceCheckUtils]: 117: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:35,025 INFO L290 TraceCheckUtils]: 118: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,025 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {20823#true} {20824#false} #262#return; {20824#false} is VALID [2022-02-20 18:11:35,025 INFO L290 TraceCheckUtils]: 120: Hoare triple {20824#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {20824#false} is VALID [2022-02-20 18:11:35,025 INFO L290 TraceCheckUtils]: 121: Hoare triple {20824#false} assume !(0 != processEnvironment_~tmp~2#1); {20824#false} is VALID [2022-02-20 18:11:35,026 INFO L272 TraceCheckUtils]: 122: Hoare triple {20824#false} call processEnvironment__wrappee__methaneQuery(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 123: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 124: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20823#true} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 125: Hoare triple {20823#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20823#true} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 126: Hoare triple {20823#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20823#true} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 127: Hoare triple {20823#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20823#true} is VALID [2022-02-20 18:11:35,026 INFO L290 TraceCheckUtils]: 128: Hoare triple {20823#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20823#true} is VALID [2022-02-20 18:11:35,027 INFO L290 TraceCheckUtils]: 129: Hoare triple {20823#true} assume !(0 != ~tmp~1#1); {20823#true} is VALID [2022-02-20 18:11:35,027 INFO L272 TraceCheckUtils]: 130: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,027 INFO L290 TraceCheckUtils]: 131: Hoare triple {20948#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:35,027 INFO L290 TraceCheckUtils]: 132: Hoare triple {20823#true} assume !(0 == ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L272 TraceCheckUtils]: 133: Hoare triple {20823#true} call processEnvironment__wrappee__base(); {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L290 TraceCheckUtils]: 134: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {20823#true} {20823#true} #282#return; {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L290 TraceCheckUtils]: 136: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L284 TraceCheckUtils]: 137: Hoare quadruple {20823#true} {20823#true} #286#return; {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L290 TraceCheckUtils]: 138: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,028 INFO L284 TraceCheckUtils]: 139: Hoare quadruple {20823#true} {20824#false} #266#return; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 140: Hoare triple {20824#false} assume { :end_inline_processEnvironment } true; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 141: Hoare triple {20824#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 142: Hoare triple {20824#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 143: Hoare triple {20824#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 144: Hoare triple {20824#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 145: Hoare triple {20824#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {20824#false} is VALID [2022-02-20 18:11:35,029 INFO L290 TraceCheckUtils]: 146: Hoare triple {20824#false} assume !false; {20824#false} is VALID [2022-02-20 18:11:35,030 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 49 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-02-20 18:11:35,030 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:35,030 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1831211036] [2022-02-20 18:11:35,031 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1831211036] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:35,031 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1799010029] [2022-02-20 18:11:35,031 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-02-20 18:11:35,031 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:35,031 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:35,048 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:35,107 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-02-20 18:11:35,203 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-02-20 18:11:35,204 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-02-20 18:11:35,205 INFO L263 TraceCheckSpWp]: Trace formula consists of 474 conjuncts, 10 conjunts are in the unsatisfiable core [2022-02-20 18:11:35,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,232 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:35,601 INFO L290 TraceCheckUtils]: 0: Hoare triple {20823#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 1: Hoare triple {20823#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 2: Hoare triple {20823#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 3: Hoare triple {20823#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 4: Hoare triple {20823#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 5: Hoare triple {20823#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 6: Hoare triple {20823#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 7: Hoare triple {20823#true} assume !false; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 8: Hoare triple {20823#true} assume test_~splverifierCounter~0#1 < 4; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 9: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 10: Hoare triple {20823#true} assume 0 != test_~tmp~6#1; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L272 TraceCheckUtils]: 11: Hoare triple {20823#true} call waterRise(); {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 12: Hoare triple {20823#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 13: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {20823#true} {20823#true} #270#return; {20823#true} is VALID [2022-02-20 18:11:35,602 INFO L290 TraceCheckUtils]: 15: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 16: Hoare triple {20823#true} assume !(0 != test_~tmp___0~2#1); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 17: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 18: Hoare triple {20823#true} assume 0 != test_~tmp___2~0#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L272 TraceCheckUtils]: 19: Hoare triple {20823#true} call timeShift(); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 20: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 21: Hoare triple {20823#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 22: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L272 TraceCheckUtils]: 23: Hoare triple {20823#true} call processEnvironment__wrappee__methaneQuery(); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 24: Hoare triple {20823#true} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 25: Hoare triple {20823#true} assume !(0 != ~pumpRunning~0); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L272 TraceCheckUtils]: 26: Hoare triple {20823#true} call processEnvironment__wrappee__highWaterSensor(); {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 27: Hoare triple {20823#true} havoc ~tmp~0#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 28: Hoare triple {20823#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 29: Hoare triple {20823#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 30: Hoare triple {20823#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {20823#true} is VALID [2022-02-20 18:11:35,603 INFO L290 TraceCheckUtils]: 31: Hoare triple {20823#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 32: Hoare triple {20823#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 33: Hoare triple {20823#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 34: Hoare triple {20823#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L272 TraceCheckUtils]: 35: Hoare triple {20823#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 36: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 37: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 38: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {20823#true} {20823#true} #278#return; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 40: Hoare triple {20823#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 41: Hoare triple {20823#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 42: Hoare triple {20823#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 43: Hoare triple {20823#true} assume { :end_inline_activatePump } true; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 44: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {20823#true} {20823#true} #288#return; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L290 TraceCheckUtils]: 46: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,604 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {20823#true} {20823#true} #268#return; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 48: Hoare triple {20823#true} assume { :end_inline_processEnvironment } true; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 49: Hoare triple {20823#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 50: Hoare triple {20823#true} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 51: Hoare triple {20823#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 52: Hoare triple {20823#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 53: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {20823#true} {20823#true} #274#return; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 55: Hoare triple {20823#true} assume !false; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 56: Hoare triple {20823#true} assume test_~splverifierCounter~0#1 < 4; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 57: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 58: Hoare triple {20823#true} assume !(0 != test_~tmp~6#1); {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 59: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 60: Hoare triple {20823#true} assume !(0 != test_~tmp___0~2#1); {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 61: Hoare triple {20823#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 62: Hoare triple {20823#true} assume 0 != test_~tmp___2~0#1; {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L272 TraceCheckUtils]: 63: Hoare triple {20823#true} call timeShift(); {20823#true} is VALID [2022-02-20 18:11:35,605 INFO L290 TraceCheckUtils]: 64: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20823#true} is VALID [2022-02-20 18:11:35,606 INFO L290 TraceCheckUtils]: 65: Hoare triple {20823#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20823#true} is VALID [2022-02-20 18:11:35,606 INFO L290 TraceCheckUtils]: 66: Hoare triple {20823#true} assume { :end_inline_lowerWaterLevel } true; {20823#true} is VALID [2022-02-20 18:11:35,606 INFO L290 TraceCheckUtils]: 67: Hoare triple {20823#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 68: Hoare triple {20823#true} assume 0 != ~pumpRunning~0; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L272 TraceCheckUtils]: 69: Hoare triple {20823#true} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 70: Hoare triple {20823#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 71: Hoare triple {20823#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 72: Hoare triple {20823#true} assume true; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {20823#true} {20823#true} #262#return; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 74: Hoare triple {20823#true} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 75: Hoare triple {20823#true} assume !(0 != processEnvironment_~tmp~2#1); {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L272 TraceCheckUtils]: 76: Hoare triple {20823#true} call processEnvironment__wrappee__methaneQuery(); {20823#true} is VALID [2022-02-20 18:11:35,608 INFO L290 TraceCheckUtils]: 77: Hoare triple {20823#true} havoc ~tmp~1#1; {20823#true} is VALID [2022-02-20 18:11:35,609 INFO L290 TraceCheckUtils]: 78: Hoare triple {20823#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} is VALID [2022-02-20 18:11:35,610 INFO L290 TraceCheckUtils]: 79: Hoare triple {20995#(or (and (not (= ~waterLevel~0 0)) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) (and (= ~waterLevel~0 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 1)))} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} is VALID [2022-02-20 18:11:35,610 INFO L290 TraceCheckUtils]: 80: Hoare triple {20996#(or (and (= (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 0) (not (= ~waterLevel~0 0))) (and (= (+ (* (- 1) |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1|) 1) 0) (= ~waterLevel~0 0)))} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,610 INFO L290 TraceCheckUtils]: 81: Hoare triple {20997#(= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,611 INFO L290 TraceCheckUtils]: 82: Hoare triple {20997#(= ~waterLevel~0 0)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,611 INFO L290 TraceCheckUtils]: 83: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != ~tmp~1#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,611 INFO L272 TraceCheckUtils]: 84: Hoare triple {20997#(= ~waterLevel~0 0)} call processEnvironment__wrappee__highWaterSensor(); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,612 INFO L290 TraceCheckUtils]: 85: Hoare triple {20997#(= ~waterLevel~0 0)} havoc ~tmp~0#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,612 INFO L290 TraceCheckUtils]: 86: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 == ~pumpRunning~0); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,612 INFO L272 TraceCheckUtils]: 87: Hoare triple {20997#(= ~waterLevel~0 0)} call processEnvironment__wrappee__base(); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,613 INFO L290 TraceCheckUtils]: 88: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,613 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20997#(= ~waterLevel~0 0)} #282#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,613 INFO L290 TraceCheckUtils]: 90: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,613 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20997#(= ~waterLevel~0 0)} #286#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,614 INFO L290 TraceCheckUtils]: 92: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,614 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20823#true} #266#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,614 INFO L290 TraceCheckUtils]: 94: Hoare triple {20997#(= ~waterLevel~0 0)} assume { :end_inline_processEnvironment } true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,615 INFO L290 TraceCheckUtils]: 95: Hoare triple {20997#(= ~waterLevel~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,615 INFO L290 TraceCheckUtils]: 96: Hoare triple {20997#(= ~waterLevel~0 0)} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,615 INFO L290 TraceCheckUtils]: 97: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,615 INFO L290 TraceCheckUtils]: 98: Hoare triple {20997#(= ~waterLevel~0 0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,616 INFO L290 TraceCheckUtils]: 99: Hoare triple {20997#(= ~waterLevel~0 0)} assume true; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,616 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {20997#(= ~waterLevel~0 0)} {20823#true} #274#return; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,616 INFO L290 TraceCheckUtils]: 101: Hoare triple {20997#(= ~waterLevel~0 0)} assume !false; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,617 INFO L290 TraceCheckUtils]: 102: Hoare triple {20997#(= ~waterLevel~0 0)} assume test_~splverifierCounter~0#1 < 4; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,617 INFO L290 TraceCheckUtils]: 103: Hoare triple {20997#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,617 INFO L290 TraceCheckUtils]: 104: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != test_~tmp~6#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,617 INFO L290 TraceCheckUtils]: 105: Hoare triple {20997#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,618 INFO L290 TraceCheckUtils]: 106: Hoare triple {20997#(= ~waterLevel~0 0)} assume !(0 != test_~tmp___0~2#1); {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,618 INFO L290 TraceCheckUtils]: 107: Hoare triple {20997#(= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,618 INFO L290 TraceCheckUtils]: 108: Hoare triple {20997#(= ~waterLevel~0 0)} assume 0 != test_~tmp___2~0#1; {20997#(= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,619 INFO L272 TraceCheckUtils]: 109: Hoare triple {20997#(= ~waterLevel~0 0)} call timeShift(); {21346#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,619 INFO L290 TraceCheckUtils]: 110: Hoare triple {21346#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {21346#(<= ~waterLevel~0 0)} is VALID [2022-02-20 18:11:35,619 INFO L290 TraceCheckUtils]: 111: Hoare triple {21346#(<= ~waterLevel~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20824#false} is VALID [2022-02-20 18:11:35,619 INFO L290 TraceCheckUtils]: 112: Hoare triple {20824#false} assume { :end_inline_lowerWaterLevel } true; {20824#false} is VALID [2022-02-20 18:11:35,619 INFO L290 TraceCheckUtils]: 113: Hoare triple {20824#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 114: Hoare triple {20824#false} assume 0 != ~pumpRunning~0; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L272 TraceCheckUtils]: 115: Hoare triple {20824#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 116: Hoare triple {20824#false} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 117: Hoare triple {20824#false} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 118: Hoare triple {20824#false} assume true; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {20824#false} {20824#false} #262#return; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 120: Hoare triple {20824#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 121: Hoare triple {20824#false} assume !(0 != processEnvironment_~tmp~2#1); {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L272 TraceCheckUtils]: 122: Hoare triple {20824#false} call processEnvironment__wrappee__methaneQuery(); {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 123: Hoare triple {20824#false} havoc ~tmp~1#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 124: Hoare triple {20824#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 125: Hoare triple {20824#false} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 126: Hoare triple {20824#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 127: Hoare triple {20824#false} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 128: Hoare triple {20824#false} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {20824#false} is VALID [2022-02-20 18:11:35,620 INFO L290 TraceCheckUtils]: 129: Hoare triple {20824#false} assume !(0 != ~tmp~1#1); {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L272 TraceCheckUtils]: 130: Hoare triple {20824#false} call processEnvironment__wrappee__highWaterSensor(); {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L290 TraceCheckUtils]: 131: Hoare triple {20824#false} havoc ~tmp~0#1; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L290 TraceCheckUtils]: 132: Hoare triple {20824#false} assume !(0 == ~pumpRunning~0); {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L272 TraceCheckUtils]: 133: Hoare triple {20824#false} call processEnvironment__wrappee__base(); {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L290 TraceCheckUtils]: 134: Hoare triple {20824#false} assume true; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {20824#false} {20824#false} #282#return; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L290 TraceCheckUtils]: 136: Hoare triple {20824#false} assume true; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L284 TraceCheckUtils]: 137: Hoare quadruple {20824#false} {20824#false} #286#return; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L290 TraceCheckUtils]: 138: Hoare triple {20824#false} assume true; {20824#false} is VALID [2022-02-20 18:11:35,621 INFO L284 TraceCheckUtils]: 139: Hoare quadruple {20824#false} {20824#false} #266#return; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 140: Hoare triple {20824#false} assume { :end_inline_processEnvironment } true; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 141: Hoare triple {20824#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 142: Hoare triple {20824#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 143: Hoare triple {20824#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 144: Hoare triple {20824#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 145: Hoare triple {20824#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {20824#false} is VALID [2022-02-20 18:11:35,622 INFO L290 TraceCheckUtils]: 146: Hoare triple {20824#false} assume !false; {20824#false} is VALID [2022-02-20 18:11:35,623 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 84 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-02-20 18:11:35,623 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:35,623 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1799010029] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:35,623 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:35,623 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-02-20 18:11:35,623 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803154578] [2022-02-20 18:11:35,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:35,624 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 147 [2022-02-20 18:11:35,624 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:35,624 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:35,693 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 134 edges. 134 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:35,693 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:35,693 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:35,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:35,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:35,694 INFO L87 Difference]: Start difference. First operand 563 states and 731 transitions. Second operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:36,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:36,896 INFO L93 Difference]: Finished difference Result 1451 states and 1937 transitions. [2022-02-20 18:11:36,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-20 18:11:36,896 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 147 [2022-02-20 18:11:36,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:36,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:36,901 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 413 transitions. [2022-02-20 18:11:36,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:36,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 413 transitions. [2022-02-20 18:11:36,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 413 transitions. [2022-02-20 18:11:37,172 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:37,227 INFO L225 Difference]: With dead ends: 1451 [2022-02-20 18:11:37,227 INFO L226 Difference]: Without dead ends: 937 [2022-02-20 18:11:37,230 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 174 SyntacticMatches, 4 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-02-20 18:11:37,231 INFO L933 BasicCegarLoop]: 188 mSDtfsCounter, 186 mSDsluCounter, 532 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 186 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:37,231 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [186 Valid, 720 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:11:37,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 937 states. [2022-02-20 18:11:37,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 937 to 826. [2022-02-20 18:11:37,635 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:37,636 INFO L82 GeneralOperation]: Start isEquivalent. First operand 937 states. Second operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) [2022-02-20 18:11:37,637 INFO L74 IsIncluded]: Start isIncluded. First operand 937 states. Second operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) [2022-02-20 18:11:37,638 INFO L87 Difference]: Start difference. First operand 937 states. Second operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) [2022-02-20 18:11:37,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:37,672 INFO L93 Difference]: Finished difference Result 937 states and 1190 transitions. [2022-02-20 18:11:37,672 INFO L276 IsEmpty]: Start isEmpty. Operand 937 states and 1190 transitions. [2022-02-20 18:11:37,675 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:37,675 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:37,677 INFO L74 IsIncluded]: Start isIncluded. First operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) Second operand 937 states. [2022-02-20 18:11:37,677 INFO L87 Difference]: Start difference. First operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) Second operand 937 states. [2022-02-20 18:11:37,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:37,711 INFO L93 Difference]: Finished difference Result 937 states and 1190 transitions. [2022-02-20 18:11:37,711 INFO L276 IsEmpty]: Start isEmpty. Operand 937 states and 1190 transitions. [2022-02-20 18:11:37,713 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:37,714 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:37,714 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:37,714 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:37,715 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) [2022-02-20 18:11:37,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 826 states to 826 states and 1042 transitions. [2022-02-20 18:11:37,751 INFO L78 Accepts]: Start accepts. Automaton has 826 states and 1042 transitions. Word has length 147 [2022-02-20 18:11:37,751 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:37,751 INFO L470 AbstractCegarLoop]: Abstraction has 826 states and 1042 transitions. [2022-02-20 18:11:37,751 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:37,751 INFO L276 IsEmpty]: Start isEmpty. Operand 826 states and 1042 transitions. [2022-02-20 18:11:37,755 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-02-20 18:11:37,756 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:37,756 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:37,776 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-02-20 18:11:37,974 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:37,975 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:37,975 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:37,975 INFO L85 PathProgramCache]: Analyzing trace with hash -2095224393, now seen corresponding path program 1 times [2022-02-20 18:11:37,975 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:37,976 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1084253038] [2022-02-20 18:11:37,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:37,976 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:38,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-02-20 18:11:38,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,028 INFO L290 TraceCheckUtils]: 0: Hoare triple {26629#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26531#true} is VALID [2022-02-20 18:11:38,028 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,028 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {26531#true} {26531#true} #270#return; {26531#true} is VALID [2022-02-20 18:11:38,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:38,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:38,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:38,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:38,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,057 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,057 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,057 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {26531#true} is VALID [2022-02-20 18:11:38,058 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L290 TraceCheckUtils]: 7: Hoare triple {26531#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L272 TraceCheckUtils]: 8: Hoare triple {26531#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,059 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L290 TraceCheckUtils]: 11: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L290 TraceCheckUtils]: 14: Hoare triple {26531#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L290 TraceCheckUtils]: 15: Hoare triple {26531#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {26531#true} is VALID [2022-02-20 18:11:38,060 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} assume { :end_inline_activatePump } true; {26531#true} is VALID [2022-02-20 18:11:38,061 INFO L290 TraceCheckUtils]: 17: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,061 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {26531#true} {26531#true} #288#return; {26531#true} is VALID [2022-02-20 18:11:38,061 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,061 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,062 INFO L272 TraceCheckUtils]: 2: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,062 INFO L290 TraceCheckUtils]: 3: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,062 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,062 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,062 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {26531#true} is VALID [2022-02-20 18:11:38,062 INFO L290 TraceCheckUtils]: 7: Hoare triple {26531#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L290 TraceCheckUtils]: 8: Hoare triple {26531#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L272 TraceCheckUtils]: 11: Hoare triple {26531#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L290 TraceCheckUtils]: 12: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,063 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 14: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 17: Hoare triple {26531#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 18: Hoare triple {26531#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 19: Hoare triple {26531#true} assume { :end_inline_activatePump } true; {26531#true} is VALID [2022-02-20 18:11:38,064 INFO L290 TraceCheckUtils]: 20: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,065 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {26531#true} {26531#true} #288#return; {26531#true} is VALID [2022-02-20 18:11:38,065 INFO L290 TraceCheckUtils]: 22: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,065 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {26531#true} {26531#true} #268#return; {26531#true} is VALID [2022-02-20 18:11:38,065 INFO L290 TraceCheckUtils]: 0: Hoare triple {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,066 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,066 INFO L272 TraceCheckUtils]: 3: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,066 INFO L290 TraceCheckUtils]: 4: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,066 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,067 INFO L272 TraceCheckUtils]: 6: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,067 INFO L290 TraceCheckUtils]: 7: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,067 INFO L290 TraceCheckUtils]: 8: Hoare triple {26531#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,067 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,067 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L290 TraceCheckUtils]: 11: Hoare triple {26531#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L290 TraceCheckUtils]: 12: Hoare triple {26531#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L290 TraceCheckUtils]: 14: Hoare triple {26531#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L272 TraceCheckUtils]: 15: Hoare triple {26531#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,068 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 17: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 18: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L284 TraceCheckUtils]: 19: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 20: Hoare triple {26531#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 21: Hoare triple {26531#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 22: Hoare triple {26531#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {26531#true} is VALID [2022-02-20 18:11:38,069 INFO L290 TraceCheckUtils]: 23: Hoare triple {26531#true} assume { :end_inline_activatePump } true; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L290 TraceCheckUtils]: 24: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {26531#true} {26531#true} #288#return; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L290 TraceCheckUtils]: 26: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {26531#true} {26531#true} #268#return; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L290 TraceCheckUtils]: 28: Hoare triple {26531#true} assume { :end_inline_processEnvironment } true; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L290 TraceCheckUtils]: 29: Hoare triple {26531#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26531#true} is VALID [2022-02-20 18:11:38,070 INFO L290 TraceCheckUtils]: 30: Hoare triple {26531#true} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26531#true} is VALID [2022-02-20 18:11:38,071 INFO L290 TraceCheckUtils]: 31: Hoare triple {26531#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26531#true} is VALID [2022-02-20 18:11:38,071 INFO L290 TraceCheckUtils]: 32: Hoare triple {26531#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26531#true} is VALID [2022-02-20 18:11:38,071 INFO L290 TraceCheckUtils]: 33: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,071 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {26531#true} {26531#true} #274#return; {26531#true} is VALID [2022-02-20 18:11:38,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-02-20 18:11:38,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-02-20 18:11:38,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,088 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,088 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,088 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,088 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26531#true} {26531#true} #262#return; {26531#true} is VALID [2022-02-20 18:11:38,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:11:38,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:38,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:38,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,116 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,116 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,116 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,116 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L272 TraceCheckUtils]: 2: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {26531#true} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,117 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,117 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,118 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,118 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~1#1 := 1; {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:11:38,119 INFO L290 TraceCheckUtils]: 4: Hoare triple {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:38,119 INFO L290 TraceCheckUtils]: 5: Hoare triple {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} is VALID [2022-02-20 18:11:38,119 INFO L290 TraceCheckUtils]: 6: Hoare triple {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} assume !(0 != ~tmp~1#1); {26532#false} is VALID [2022-02-20 18:11:38,119 INFO L272 TraceCheckUtils]: 7: Hoare triple {26532#false} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,120 INFO L290 TraceCheckUtils]: 8: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,120 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,120 INFO L272 TraceCheckUtils]: 10: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,120 INFO L290 TraceCheckUtils]: 11: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,120 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,120 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,121 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {26531#true} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,121 INFO L290 TraceCheckUtils]: 15: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,121 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {26532#false} {26531#true} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,121 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26531#true} is VALID [2022-02-20 18:11:38,121 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume { :end_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} assume 0 != ~pumpRunning~0; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L272 TraceCheckUtils]: 5: Hoare triple {26531#true} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L290 TraceCheckUtils]: 7: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L290 TraceCheckUtils]: 8: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,122 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {26531#true} {26531#true} #262#return; {26531#true} is VALID [2022-02-20 18:11:38,123 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {26531#true} is VALID [2022-02-20 18:11:38,123 INFO L290 TraceCheckUtils]: 11: Hoare triple {26531#true} assume !(0 != processEnvironment_~tmp~2#1); {26531#true} is VALID [2022-02-20 18:11:38,123 INFO L272 TraceCheckUtils]: 12: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,123 INFO L290 TraceCheckUtils]: 13: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,124 INFO L290 TraceCheckUtils]: 14: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,124 INFO L290 TraceCheckUtils]: 15: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,124 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~1#1 := 1; {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:11:38,125 INFO L290 TraceCheckUtils]: 17: Hoare triple {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:38,125 INFO L290 TraceCheckUtils]: 18: Hoare triple {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} is VALID [2022-02-20 18:11:38,125 INFO L290 TraceCheckUtils]: 19: Hoare triple {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} assume !(0 != ~tmp~1#1); {26532#false} is VALID [2022-02-20 18:11:38,125 INFO L272 TraceCheckUtils]: 20: Hoare triple {26532#false} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,126 INFO L290 TraceCheckUtils]: 21: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L290 TraceCheckUtils]: 22: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L272 TraceCheckUtils]: 23: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L290 TraceCheckUtils]: 24: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L290 TraceCheckUtils]: 26: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,126 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {26531#true} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 28: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {26532#false} {26531#true} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 30: Hoare triple {26532#false} assume { :end_inline_processEnvironment } true; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 31: Hoare triple {26532#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 32: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 33: Hoare triple {26532#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26532#false} is VALID [2022-02-20 18:11:38,127 INFO L290 TraceCheckUtils]: 34: Hoare triple {26532#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26532#false} is VALID [2022-02-20 18:11:38,128 INFO L290 TraceCheckUtils]: 35: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,128 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {26532#false} {26531#true} #274#return; {26532#false} is VALID [2022-02-20 18:11:38,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-02-20 18:11:38,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,132 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,132 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,132 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,132 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {26531#true} {26532#false} #262#return; {26532#false} is VALID [2022-02-20 18:11:38,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-02-20 18:11:38,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-02-20 18:11:38,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:38,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,145 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,145 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,145 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L272 TraceCheckUtils]: 2: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {26531#true} {26531#true} #286#return; {26531#true} is VALID [2022-02-20 18:11:38,146 INFO L290 TraceCheckUtils]: 0: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26531#true} is VALID [2022-02-20 18:11:38,147 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} assume !(0 != ~tmp~1#1); {26531#true} is VALID [2022-02-20 18:11:38,148 INFO L272 TraceCheckUtils]: 7: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,148 INFO L290 TraceCheckUtils]: 8: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,148 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,148 INFO L272 TraceCheckUtils]: 10: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,148 INFO L290 TraceCheckUtils]: 11: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,149 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,149 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,149 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {26531#true} {26531#true} #286#return; {26531#true} is VALID [2022-02-20 18:11:38,149 INFO L290 TraceCheckUtils]: 15: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,149 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {26531#true} {26532#false} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,149 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {26531#true} is VALID [2022-02-20 18:11:38,150 INFO L290 TraceCheckUtils]: 7: Hoare triple {26531#true} assume !false; {26531#true} is VALID [2022-02-20 18:11:38,151 INFO L290 TraceCheckUtils]: 8: Hoare triple {26531#true} assume test_~splverifierCounter~0#1 < 4; {26531#true} is VALID [2022-02-20 18:11:38,151 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26531#true} is VALID [2022-02-20 18:11:38,151 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} assume 0 != test_~tmp~6#1; {26531#true} is VALID [2022-02-20 18:11:38,151 INFO L272 TraceCheckUtils]: 11: Hoare triple {26531#true} call waterRise(); {26629#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 12: Hoare triple {26629#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {26531#true} {26531#true} #270#return; {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 15: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} assume !(0 != test_~tmp___0~2#1); {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 17: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26531#true} is VALID [2022-02-20 18:11:38,152 INFO L290 TraceCheckUtils]: 18: Hoare triple {26531#true} assume 0 != test_~tmp___2~0#1; {26531#true} is VALID [2022-02-20 18:11:38,153 INFO L272 TraceCheckUtils]: 19: Hoare triple {26531#true} call timeShift(); {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:38,153 INFO L290 TraceCheckUtils]: 20: Hoare triple {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,153 INFO L290 TraceCheckUtils]: 21: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,153 INFO L290 TraceCheckUtils]: 22: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,154 INFO L272 TraceCheckUtils]: 23: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,154 INFO L290 TraceCheckUtils]: 24: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,154 INFO L290 TraceCheckUtils]: 25: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,154 INFO L272 TraceCheckUtils]: 26: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,154 INFO L290 TraceCheckUtils]: 27: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 28: Hoare triple {26531#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 29: Hoare triple {26531#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 30: Hoare triple {26531#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 31: Hoare triple {26531#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 32: Hoare triple {26531#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 33: Hoare triple {26531#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {26531#true} is VALID [2022-02-20 18:11:38,155 INFO L290 TraceCheckUtils]: 34: Hoare triple {26531#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L272 TraceCheckUtils]: 35: Hoare triple {26531#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L290 TraceCheckUtils]: 36: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L290 TraceCheckUtils]: 37: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L290 TraceCheckUtils]: 38: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L290 TraceCheckUtils]: 40: Hoare triple {26531#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {26531#true} is VALID [2022-02-20 18:11:38,156 INFO L290 TraceCheckUtils]: 41: Hoare triple {26531#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L290 TraceCheckUtils]: 42: Hoare triple {26531#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L290 TraceCheckUtils]: 43: Hoare triple {26531#true} assume { :end_inline_activatePump } true; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L290 TraceCheckUtils]: 44: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {26531#true} {26531#true} #288#return; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L290 TraceCheckUtils]: 46: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {26531#true} {26531#true} #268#return; {26531#true} is VALID [2022-02-20 18:11:38,157 INFO L290 TraceCheckUtils]: 48: Hoare triple {26531#true} assume { :end_inline_processEnvironment } true; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 49: Hoare triple {26531#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 50: Hoare triple {26531#true} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 51: Hoare triple {26531#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 52: Hoare triple {26531#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 53: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {26531#true} {26531#true} #274#return; {26531#true} is VALID [2022-02-20 18:11:38,158 INFO L290 TraceCheckUtils]: 55: Hoare triple {26531#true} assume !false; {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 56: Hoare triple {26531#true} assume test_~splverifierCounter~0#1 < 4; {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 57: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 58: Hoare triple {26531#true} assume !(0 != test_~tmp~6#1); {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 59: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 60: Hoare triple {26531#true} assume !(0 != test_~tmp___0~2#1); {26531#true} is VALID [2022-02-20 18:11:38,159 INFO L290 TraceCheckUtils]: 61: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26531#true} is VALID [2022-02-20 18:11:38,160 INFO L290 TraceCheckUtils]: 62: Hoare triple {26531#true} assume 0 != test_~tmp___2~0#1; {26531#true} is VALID [2022-02-20 18:11:38,160 INFO L272 TraceCheckUtils]: 63: Hoare triple {26531#true} call timeShift(); {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:38,160 INFO L290 TraceCheckUtils]: 64: Hoare triple {26630#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,160 INFO L290 TraceCheckUtils]: 65: Hoare triple {26531#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 66: Hoare triple {26531#true} assume { :end_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 67: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 68: Hoare triple {26531#true} assume 0 != ~pumpRunning~0; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L272 TraceCheckUtils]: 69: Hoare triple {26531#true} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 70: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 71: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,161 INFO L290 TraceCheckUtils]: 72: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,162 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {26531#true} {26531#true} #262#return; {26531#true} is VALID [2022-02-20 18:11:38,162 INFO L290 TraceCheckUtils]: 74: Hoare triple {26531#true} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {26531#true} is VALID [2022-02-20 18:11:38,162 INFO L290 TraceCheckUtils]: 75: Hoare triple {26531#true} assume !(0 != processEnvironment_~tmp~2#1); {26531#true} is VALID [2022-02-20 18:11:38,162 INFO L272 TraceCheckUtils]: 76: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,162 INFO L290 TraceCheckUtils]: 77: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,163 INFO L290 TraceCheckUtils]: 78: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,163 INFO L290 TraceCheckUtils]: 79: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,163 INFO L290 TraceCheckUtils]: 80: Hoare triple {26531#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~1#1 := 1; {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:11:38,164 INFO L290 TraceCheckUtils]: 81: Hoare triple {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:38,164 INFO L290 TraceCheckUtils]: 82: Hoare triple {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} is VALID [2022-02-20 18:11:38,164 INFO L290 TraceCheckUtils]: 83: Hoare triple {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} assume !(0 != ~tmp~1#1); {26532#false} is VALID [2022-02-20 18:11:38,164 INFO L272 TraceCheckUtils]: 84: Hoare triple {26532#false} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,165 INFO L290 TraceCheckUtils]: 85: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L290 TraceCheckUtils]: 86: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L272 TraceCheckUtils]: 87: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L290 TraceCheckUtils]: 88: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L290 TraceCheckUtils]: 90: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,165 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {26531#true} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L290 TraceCheckUtils]: 92: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {26532#false} {26531#true} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L290 TraceCheckUtils]: 94: Hoare triple {26532#false} assume { :end_inline_processEnvironment } true; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L290 TraceCheckUtils]: 95: Hoare triple {26532#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L290 TraceCheckUtils]: 96: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26532#false} is VALID [2022-02-20 18:11:38,166 INFO L290 TraceCheckUtils]: 97: Hoare triple {26532#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 98: Hoare triple {26532#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 99: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {26532#false} {26531#true} #274#return; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 101: Hoare triple {26532#false} assume !false; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 102: Hoare triple {26532#false} assume test_~splverifierCounter~0#1 < 4; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 103: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26532#false} is VALID [2022-02-20 18:11:38,167 INFO L290 TraceCheckUtils]: 104: Hoare triple {26532#false} assume !(0 != test_~tmp~6#1); {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 105: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 106: Hoare triple {26532#false} assume !(0 != test_~tmp___0~2#1); {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 107: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 108: Hoare triple {26532#false} assume 0 != test_~tmp___2~0#1; {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L272 TraceCheckUtils]: 109: Hoare triple {26532#false} call timeShift(); {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 110: Hoare triple {26532#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26532#false} is VALID [2022-02-20 18:11:38,168 INFO L290 TraceCheckUtils]: 111: Hoare triple {26532#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26532#false} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 112: Hoare triple {26532#false} assume { :end_inline_lowerWaterLevel } true; {26532#false} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 113: Hoare triple {26532#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26532#false} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 114: Hoare triple {26532#false} assume 0 != ~pumpRunning~0; {26532#false} is VALID [2022-02-20 18:11:38,169 INFO L272 TraceCheckUtils]: 115: Hoare triple {26532#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 116: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 117: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,169 INFO L290 TraceCheckUtils]: 118: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,170 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {26531#true} {26532#false} #262#return; {26532#false} is VALID [2022-02-20 18:11:38,170 INFO L290 TraceCheckUtils]: 120: Hoare triple {26532#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {26532#false} is VALID [2022-02-20 18:11:38,170 INFO L290 TraceCheckUtils]: 121: Hoare triple {26532#false} assume !(0 != processEnvironment_~tmp~2#1); {26532#false} is VALID [2022-02-20 18:11:38,170 INFO L272 TraceCheckUtils]: 122: Hoare triple {26532#false} call processEnvironment__wrappee__methaneQuery(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,170 INFO L290 TraceCheckUtils]: 123: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,170 INFO L290 TraceCheckUtils]: 124: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,171 INFO L290 TraceCheckUtils]: 125: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,171 INFO L290 TraceCheckUtils]: 126: Hoare triple {26531#true} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {26531#true} is VALID [2022-02-20 18:11:38,171 INFO L290 TraceCheckUtils]: 127: Hoare triple {26531#true} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26531#true} is VALID [2022-02-20 18:11:38,171 INFO L290 TraceCheckUtils]: 128: Hoare triple {26531#true} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26531#true} is VALID [2022-02-20 18:11:38,171 INFO L290 TraceCheckUtils]: 129: Hoare triple {26531#true} assume !(0 != ~tmp~1#1); {26531#true} is VALID [2022-02-20 18:11:38,172 INFO L272 TraceCheckUtils]: 130: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:38,172 INFO L290 TraceCheckUtils]: 131: Hoare triple {26655#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,172 INFO L290 TraceCheckUtils]: 132: Hoare triple {26531#true} assume !(0 == ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,172 INFO L272 TraceCheckUtils]: 133: Hoare triple {26531#true} call processEnvironment__wrappee__base(); {26531#true} is VALID [2022-02-20 18:11:38,172 INFO L290 TraceCheckUtils]: 134: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,172 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {26531#true} {26531#true} #282#return; {26531#true} is VALID [2022-02-20 18:11:38,173 INFO L290 TraceCheckUtils]: 136: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,173 INFO L284 TraceCheckUtils]: 137: Hoare quadruple {26531#true} {26531#true} #286#return; {26531#true} is VALID [2022-02-20 18:11:38,173 INFO L290 TraceCheckUtils]: 138: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,173 INFO L284 TraceCheckUtils]: 139: Hoare quadruple {26531#true} {26532#false} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,173 INFO L290 TraceCheckUtils]: 140: Hoare triple {26532#false} assume { :end_inline_processEnvironment } true; {26532#false} is VALID [2022-02-20 18:11:38,173 INFO L290 TraceCheckUtils]: 141: Hoare triple {26532#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26532#false} is VALID [2022-02-20 18:11:38,173 INFO L290 TraceCheckUtils]: 142: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26532#false} is VALID [2022-02-20 18:11:38,174 INFO L290 TraceCheckUtils]: 143: Hoare triple {26532#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {26532#false} is VALID [2022-02-20 18:11:38,174 INFO L290 TraceCheckUtils]: 144: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {26532#false} is VALID [2022-02-20 18:11:38,174 INFO L290 TraceCheckUtils]: 145: Hoare triple {26532#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {26532#false} is VALID [2022-02-20 18:11:38,174 INFO L290 TraceCheckUtils]: 146: Hoare triple {26532#false} assume !false; {26532#false} is VALID [2022-02-20 18:11:38,174 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 43 proven. 6 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-02-20 18:11:38,175 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:38,175 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1084253038] [2022-02-20 18:11:38,175 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1084253038] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:38,175 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [894260146] [2022-02-20 18:11:38,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:38,175 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:38,176 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:38,192 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:38,215 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-02-20 18:11:38,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,335 INFO L263 TraceCheckSpWp]: Trace formula consists of 598 conjuncts, 5 conjunts are in the unsatisfiable core [2022-02-20 18:11:38,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:38,361 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:38,611 INFO L290 TraceCheckUtils]: 0: Hoare triple {26531#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(13, 12);call #Ultimate.allocInit(7, 13);call write~init~int(44, 13, 0, 1);call write~init~int(77, 13, 1, 1);call write~init~int(101, 13, 2, 1);call write~init~int(116, 13, 3, 1);call write~init~int(104, 13, 4, 1);call write~init~int(58, 13, 5, 1);call write~init~int(0, 13, 6, 1);call #Ultimate.allocInit(5, 14);call write~init~int(67, 14, 0, 1);call write~init~int(82, 14, 1, 1);call write~init~int(73, 14, 2, 1);call write~init~int(84, 14, 3, 1);call write~init~int(0, 14, 4, 1);call #Ultimate.allocInit(3, 15);call write~init~int(79, 15, 0, 1);call write~init~int(75, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(41, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {26531#true} is VALID [2022-02-20 18:11:38,612 INFO L290 TraceCheckUtils]: 1: Hoare triple {26531#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret54#1, main_~retValue_acc~13#1, main_~tmp~11#1;havoc main_~retValue_acc~13#1;havoc main_~tmp~11#1;assume { :begin_inline_select_helpers } true; {26531#true} is VALID [2022-02-20 18:11:38,612 INFO L290 TraceCheckUtils]: 2: Hoare triple {26531#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {26531#true} is VALID [2022-02-20 18:11:38,612 INFO L290 TraceCheckUtils]: 3: Hoare triple {26531#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {26531#true} is VALID [2022-02-20 18:11:38,612 INFO L290 TraceCheckUtils]: 4: Hoare triple {26531#true} main_#t~ret54#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret54#1 && main_#t~ret54#1 <= 2147483647;main_~tmp~11#1 := main_#t~ret54#1;havoc main_#t~ret54#1; {26531#true} is VALID [2022-02-20 18:11:38,612 INFO L290 TraceCheckUtils]: 5: Hoare triple {26531#true} assume 0 != main_~tmp~11#1;assume { :begin_inline_setup } true; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L290 TraceCheckUtils]: 6: Hoare triple {26531#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet20#1, test_#t~nondet21#1, test_#t~nondet22#1, test_#t~nondet23#1, test_~splverifierCounter~0#1, test_~tmp~6#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~6#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L290 TraceCheckUtils]: 7: Hoare triple {26531#true} assume !false; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L290 TraceCheckUtils]: 8: Hoare triple {26531#true} assume test_~splverifierCounter~0#1 < 4; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L290 TraceCheckUtils]: 9: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L290 TraceCheckUtils]: 10: Hoare triple {26531#true} assume 0 != test_~tmp~6#1; {26531#true} is VALID [2022-02-20 18:11:38,613 INFO L272 TraceCheckUtils]: 11: Hoare triple {26531#true} call waterRise(); {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 12: Hoare triple {26531#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 13: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {26531#true} {26531#true} #270#return; {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 15: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 16: Hoare triple {26531#true} assume !(0 != test_~tmp___0~2#1); {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 17: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26531#true} is VALID [2022-02-20 18:11:38,614 INFO L290 TraceCheckUtils]: 18: Hoare triple {26531#true} assume 0 != test_~tmp___2~0#1; {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L272 TraceCheckUtils]: 19: Hoare triple {26531#true} call timeShift(); {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L290 TraceCheckUtils]: 20: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L290 TraceCheckUtils]: 21: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L290 TraceCheckUtils]: 22: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L272 TraceCheckUtils]: 23: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26531#true} is VALID [2022-02-20 18:11:38,615 INFO L290 TraceCheckUtils]: 24: Hoare triple {26531#true} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 25: Hoare triple {26531#true} assume !(0 != ~pumpRunning~0); {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L272 TraceCheckUtils]: 26: Hoare triple {26531#true} call processEnvironment__wrappee__highWaterSensor(); {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 27: Hoare triple {26531#true} havoc ~tmp~0#1; {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 28: Hoare triple {26531#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret18#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~8#1;havoc isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 29: Hoare triple {26531#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~8#1; {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 30: Hoare triple {26531#true} isHighWaterLevel_#t~ret18#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret18#1 && isHighWaterLevel_#t~ret18#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret18#1;havoc isHighWaterLevel_#t~ret18#1; {26531#true} is VALID [2022-02-20 18:11:38,616 INFO L290 TraceCheckUtils]: 31: Hoare triple {26531#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~0#1 := 1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 32: Hoare triple {26531#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 33: Hoare triple {26531#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 34: Hoare triple {26531#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;havoc activatePump_#t~ret8#1, activatePump_~tmp~3#1;havoc activatePump_~tmp~3#1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L272 TraceCheckUtils]: 35: Hoare triple {26531#true} call activatePump_#t~ret8#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 36: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 37: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,617 INFO L290 TraceCheckUtils]: 38: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {26531#true} {26531#true} #278#return; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L290 TraceCheckUtils]: 40: Hoare triple {26531#true} assume -2147483648 <= activatePump_#t~ret8#1 && activatePump_#t~ret8#1 <= 2147483647;activatePump_~tmp~3#1 := activatePump_#t~ret8#1;havoc activatePump_#t~ret8#1; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L290 TraceCheckUtils]: 41: Hoare triple {26531#true} assume !(0 != activatePump_~tmp~3#1);assume { :begin_inline_activatePump__wrappee__lowWaterSensor } true;~pumpRunning~0 := 1; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L290 TraceCheckUtils]: 42: Hoare triple {26531#true} assume { :end_inline_activatePump__wrappee__lowWaterSensor } true; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L290 TraceCheckUtils]: 43: Hoare triple {26531#true} assume { :end_inline_activatePump } true; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L290 TraceCheckUtils]: 44: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,618 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {26531#true} {26531#true} #288#return; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 46: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {26531#true} {26531#true} #268#return; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 48: Hoare triple {26531#true} assume { :end_inline_processEnvironment } true; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 49: Hoare triple {26531#true} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 50: Hoare triple {26531#true} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 51: Hoare triple {26531#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26531#true} is VALID [2022-02-20 18:11:38,619 INFO L290 TraceCheckUtils]: 52: Hoare triple {26531#true} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 53: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L284 TraceCheckUtils]: 54: Hoare quadruple {26531#true} {26531#true} #274#return; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 55: Hoare triple {26531#true} assume !false; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 56: Hoare triple {26531#true} assume test_~splverifierCounter~0#1 < 4; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 57: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 58: Hoare triple {26531#true} assume !(0 != test_~tmp~6#1); {26531#true} is VALID [2022-02-20 18:11:38,620 INFO L290 TraceCheckUtils]: 59: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 60: Hoare triple {26531#true} assume !(0 != test_~tmp___0~2#1); {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 61: Hoare triple {26531#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 62: Hoare triple {26531#true} assume 0 != test_~tmp___2~0#1; {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L272 TraceCheckUtils]: 63: Hoare triple {26531#true} call timeShift(); {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 64: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 65: Hoare triple {26531#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26531#true} is VALID [2022-02-20 18:11:38,621 INFO L290 TraceCheckUtils]: 66: Hoare triple {26531#true} assume { :end_inline_lowerWaterLevel } true; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L290 TraceCheckUtils]: 67: Hoare triple {26531#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L290 TraceCheckUtils]: 68: Hoare triple {26531#true} assume 0 != ~pumpRunning~0; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L272 TraceCheckUtils]: 69: Hoare triple {26531#true} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L290 TraceCheckUtils]: 70: Hoare triple {26531#true} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L290 TraceCheckUtils]: 71: Hoare triple {26531#true} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L290 TraceCheckUtils]: 72: Hoare triple {26531#true} assume true; {26531#true} is VALID [2022-02-20 18:11:38,622 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {26531#true} {26531#true} #262#return; {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L290 TraceCheckUtils]: 74: Hoare triple {26531#true} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L290 TraceCheckUtils]: 75: Hoare triple {26531#true} assume !(0 != processEnvironment_~tmp~2#1); {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L272 TraceCheckUtils]: 76: Hoare triple {26531#true} call processEnvironment__wrappee__methaneQuery(); {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L290 TraceCheckUtils]: 77: Hoare triple {26531#true} havoc ~tmp~1#1; {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L290 TraceCheckUtils]: 78: Hoare triple {26531#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26531#true} is VALID [2022-02-20 18:11:38,623 INFO L290 TraceCheckUtils]: 79: Hoare triple {26531#true} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26531#true} is VALID [2022-02-20 18:11:38,624 INFO L290 TraceCheckUtils]: 80: Hoare triple {26531#true} assume !(0 != isLowWaterLevel_~tmp~5#1);isLowWaterLevel_~tmp___0~1#1 := 1; {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:11:38,624 INFO L290 TraceCheckUtils]: 81: Hoare triple {26700#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|)} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:38,625 INFO L290 TraceCheckUtils]: 82: Hoare triple {26701#(<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|)} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} is VALID [2022-02-20 18:11:38,625 INFO L290 TraceCheckUtils]: 83: Hoare triple {26702#(<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|)} assume !(0 != ~tmp~1#1); {26532#false} is VALID [2022-02-20 18:11:38,625 INFO L272 TraceCheckUtils]: 84: Hoare triple {26532#false} call processEnvironment__wrappee__highWaterSensor(); {26532#false} is VALID [2022-02-20 18:11:38,625 INFO L290 TraceCheckUtils]: 85: Hoare triple {26532#false} havoc ~tmp~0#1; {26532#false} is VALID [2022-02-20 18:11:38,625 INFO L290 TraceCheckUtils]: 86: Hoare triple {26532#false} assume !(0 == ~pumpRunning~0); {26532#false} is VALID [2022-02-20 18:11:38,635 INFO L272 TraceCheckUtils]: 87: Hoare triple {26532#false} call processEnvironment__wrappee__base(); {26532#false} is VALID [2022-02-20 18:11:38,635 INFO L290 TraceCheckUtils]: 88: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,635 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {26532#false} {26532#false} #282#return; {26532#false} is VALID [2022-02-20 18:11:38,635 INFO L290 TraceCheckUtils]: 90: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,636 INFO L284 TraceCheckUtils]: 91: Hoare quadruple {26532#false} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,636 INFO L290 TraceCheckUtils]: 92: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,637 INFO L284 TraceCheckUtils]: 93: Hoare quadruple {26532#false} {26531#true} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,637 INFO L290 TraceCheckUtils]: 94: Hoare triple {26532#false} assume { :end_inline_processEnvironment } true; {26532#false} is VALID [2022-02-20 18:11:38,637 INFO L290 TraceCheckUtils]: 95: Hoare triple {26532#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26532#false} is VALID [2022-02-20 18:11:38,637 INFO L290 TraceCheckUtils]: 96: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L290 TraceCheckUtils]: 97: Hoare triple {26532#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7#1); {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L290 TraceCheckUtils]: 98: Hoare triple {26532#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L290 TraceCheckUtils]: 99: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {26532#false} {26531#true} #274#return; {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L290 TraceCheckUtils]: 101: Hoare triple {26532#false} assume !false; {26532#false} is VALID [2022-02-20 18:11:38,638 INFO L290 TraceCheckUtils]: 102: Hoare triple {26532#false} assume test_~splverifierCounter~0#1 < 4; {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 103: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp~6#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 104: Hoare triple {26532#false} assume !(0 != test_~tmp~6#1); {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 105: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 106: Hoare triple {26532#false} assume !(0 != test_~tmp___0~2#1); {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 107: Hoare triple {26532#false} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L290 TraceCheckUtils]: 108: Hoare triple {26532#false} assume 0 != test_~tmp___2~0#1; {26532#false} is VALID [2022-02-20 18:11:38,639 INFO L272 TraceCheckUtils]: 109: Hoare triple {26532#false} call timeShift(); {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 110: Hoare triple {26532#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 111: Hoare triple {26532#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 112: Hoare triple {26532#false} assume { :end_inline_lowerWaterLevel } true; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 113: Hoare triple {26532#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret7#1, processEnvironment_~tmp~2#1;havoc processEnvironment_~tmp~2#1; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 114: Hoare triple {26532#false} assume 0 != ~pumpRunning~0; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L272 TraceCheckUtils]: 115: Hoare triple {26532#false} call processEnvironment_#t~ret7#1 := isMethaneAlarm(); {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 116: Hoare triple {26532#false} havoc ~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;havoc isMethaneLevelCritical_~retValue_acc~6#1;isMethaneLevelCritical_~retValue_acc~6#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~6#1; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 117: Hoare triple {26532#false} #t~ret9#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= #t~ret9#1 && #t~ret9#1 <= 2147483647;~retValue_acc~2#1 := #t~ret9#1;havoc #t~ret9#1;#res#1 := ~retValue_acc~2#1; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 118: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L284 TraceCheckUtils]: 119: Hoare quadruple {26532#false} {26532#false} #262#return; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 120: Hoare triple {26532#false} assume -2147483648 <= processEnvironment_#t~ret7#1 && processEnvironment_#t~ret7#1 <= 2147483647;processEnvironment_~tmp~2#1 := processEnvironment_#t~ret7#1;havoc processEnvironment_#t~ret7#1; {26532#false} is VALID [2022-02-20 18:11:38,640 INFO L290 TraceCheckUtils]: 121: Hoare triple {26532#false} assume !(0 != processEnvironment_~tmp~2#1); {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L272 TraceCheckUtils]: 122: Hoare triple {26532#false} call processEnvironment__wrappee__methaneQuery(); {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 123: Hoare triple {26532#false} havoc ~tmp~1#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 124: Hoare triple {26532#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isLowWaterLevel } true;havoc isLowWaterLevel_#res#1;havoc isLowWaterLevel_#t~ret19#1, isLowWaterLevel_~retValue_acc~5#1, isLowWaterLevel_~tmp~5#1, isLowWaterLevel_~tmp___0~1#1;havoc isLowWaterLevel_~retValue_acc~5#1;havoc isLowWaterLevel_~tmp~5#1;havoc isLowWaterLevel_~tmp___0~1#1;assume { :begin_inline_isLowWaterSensorDry } true;havoc isLowWaterSensorDry_#res#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;havoc isLowWaterSensorDry_~retValue_acc~9#1;isLowWaterSensorDry_~retValue_acc~9#1 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res#1 := isLowWaterSensorDry_~retValue_acc~9#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 125: Hoare triple {26532#false} isLowWaterLevel_#t~ret19#1 := isLowWaterSensorDry_#res#1;assume { :end_inline_isLowWaterSensorDry } true;assume -2147483648 <= isLowWaterLevel_#t~ret19#1 && isLowWaterLevel_#t~ret19#1 <= 2147483647;isLowWaterLevel_~tmp~5#1 := isLowWaterLevel_#t~ret19#1;havoc isLowWaterLevel_#t~ret19#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 126: Hoare triple {26532#false} assume 0 != isLowWaterLevel_~tmp~5#1;isLowWaterLevel_~tmp___0~1#1 := 0; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 127: Hoare triple {26532#false} isLowWaterLevel_~retValue_acc~5#1 := isLowWaterLevel_~tmp___0~1#1;isLowWaterLevel_#res#1 := isLowWaterLevel_~retValue_acc~5#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 128: Hoare triple {26532#false} #t~ret6#1 := isLowWaterLevel_#res#1;assume { :end_inline_isLowWaterLevel } true;assume -2147483648 <= #t~ret6#1 && #t~ret6#1 <= 2147483647;~tmp~1#1 := #t~ret6#1;havoc #t~ret6#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 129: Hoare triple {26532#false} assume !(0 != ~tmp~1#1); {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L272 TraceCheckUtils]: 130: Hoare triple {26532#false} call processEnvironment__wrappee__highWaterSensor(); {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 131: Hoare triple {26532#false} havoc ~tmp~0#1; {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L290 TraceCheckUtils]: 132: Hoare triple {26532#false} assume !(0 == ~pumpRunning~0); {26532#false} is VALID [2022-02-20 18:11:38,641 INFO L272 TraceCheckUtils]: 133: Hoare triple {26532#false} call processEnvironment__wrappee__base(); {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 134: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {26532#false} {26532#false} #282#return; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 136: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L284 TraceCheckUtils]: 137: Hoare quadruple {26532#false} {26532#false} #286#return; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 138: Hoare triple {26532#false} assume true; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L284 TraceCheckUtils]: 139: Hoare quadruple {26532#false} {26532#false} #266#return; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 140: Hoare triple {26532#false} assume { :end_inline_processEnvironment } true; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 141: Hoare triple {26532#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret29#1, __utac_acc__Specification4_spec__1_#t~ret30#1, __utac_acc__Specification4_spec__1_~tmp~7#1, __utac_acc__Specification4_spec__1_~tmp___0~3#1;havoc __utac_acc__Specification4_spec__1_~tmp~7#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~7#1;havoc getWaterLevel_~retValue_acc~7#1;getWaterLevel_~retValue_acc~7#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~7#1; {26532#false} is VALID [2022-02-20 18:11:38,642 INFO L290 TraceCheckUtils]: 142: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret29#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret29#1 && __utac_acc__Specification4_spec__1_#t~ret29#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7#1 := __utac_acc__Specification4_spec__1_#t~ret29#1;havoc __utac_acc__Specification4_spec__1_#t~ret29#1; {26532#false} is VALID [2022-02-20 18:11:38,643 INFO L290 TraceCheckUtils]: 143: Hoare triple {26532#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~3#1;havoc isPumpRunning_~retValue_acc~3#1;isPumpRunning_~retValue_acc~3#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~3#1; {26532#false} is VALID [2022-02-20 18:11:38,643 INFO L290 TraceCheckUtils]: 144: Hoare triple {26532#false} __utac_acc__Specification4_spec__1_#t~ret30#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret30#1 && __utac_acc__Specification4_spec__1_#t~ret30#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3#1 := __utac_acc__Specification4_spec__1_#t~ret30#1;havoc __utac_acc__Specification4_spec__1_#t~ret30#1; {26532#false} is VALID [2022-02-20 18:11:38,644 INFO L290 TraceCheckUtils]: 145: Hoare triple {26532#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3#1;assume { :begin_inline___automaton_fail } true; {26532#false} is VALID [2022-02-20 18:11:38,644 INFO L290 TraceCheckUtils]: 146: Hoare triple {26532#false} assume !false; {26532#false} is VALID [2022-02-20 18:11:38,647 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 70 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-02-20 18:11:38,647 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:38,648 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [894260146] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:38,648 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:38,648 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-02-20 18:11:38,650 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1648270204] [2022-02-20 18:11:38,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:38,652 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 147 [2022-02-20 18:11:38,652 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:38,653 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:11:38,715 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 122 edges. 122 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:38,715 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:11:38,716 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:38,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:11:38,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:11:38,717 INFO L87 Difference]: Start difference. First operand 826 states and 1042 transitions. Second operand has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:11:39,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:39,104 INFO L93 Difference]: Finished difference Result 1128 states and 1412 transitions. [2022-02-20 18:11:39,104 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:11:39,105 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 147 [2022-02-20 18:11:39,105 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:39,105 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:11:39,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 215 transitions. [2022-02-20 18:11:39,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:11:39,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 215 transitions. [2022-02-20 18:11:39,108 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 215 transitions. [2022-02-20 18:11:39,220 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 215 edges. 215 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:39,221 INFO L225 Difference]: With dead ends: 1128 [2022-02-20 18:11:39,221 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:11:39,224 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:11:39,224 INFO L933 BasicCegarLoop]: 107 mSDtfsCounter, 9 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:39,224 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [9 Valid, 411 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:39,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:11:39,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:11:39,226 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:39,226 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:39,226 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:39,226 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:39,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:39,226 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:39,227 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:39,227 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:39,227 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:39,227 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:39,227 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:11:39,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:39,227 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:11:39,227 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:39,227 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:39,228 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:39,228 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:39,228 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:39,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:11:39,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:11:39,228 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 147 [2022-02-20 18:11:39,228 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:39,229 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:11:39,229 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-02-20 18:11:39,229 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:11:39,229 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:39,231 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:11:39,256 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-02-20 18:11:39,450 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:39,453 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:11:42,004 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 245 252) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-02-20 18:11:42,004 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 245 252) no Hoare annotation was computed. [2022-02-20 18:11:42,004 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 245 252) no Hoare annotation was computed. [2022-02-20 18:11:42,004 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 135 141) no Hoare annotation was computed. [2022-02-20 18:11:42,004 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 135 141) the Hoare annotation is: true [2022-02-20 18:11:42,004 INFO L858 garLoopResultBuilder]: For program point L447-1(lines 443 454) no Hoare annotation was computed. [2022-02-20 18:11:42,004 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 443 454) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 443 454) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 913 942) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L861 garLoopResultBuilder]: At program point L927-1(lines 927 931) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 913 942) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point L924(line 924) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L861 garLoopResultBuilder]: At program point L923-2(lines 923 937) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L861 garLoopResultBuilder]: At program point L919(line 919) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point L919-1(line 919) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L861 garLoopResultBuilder]: At program point L938(lines 913 942) the Hoare annotation is: true [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point L934(line 934) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L858 garLoopResultBuilder]: For program point L122-1(lines 122 128) no Hoare annotation was computed. [2022-02-20 18:11:42,005 INFO L854 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,005 INFO L854 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,006 INFO L854 garLoopResultBuilder]: At program point L201(line 201) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point L201-1(line 201) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 111 134) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L854 garLoopResultBuilder]: At program point L214(line 214) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:42,006 INFO L854 garLoopResultBuilder]: At program point L214-1(lines 195 219) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (<= 2 ~waterLevel~0))) (and (let ((.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1) (and .cse2 (<= 1 ~waterLevel~0) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|)))) (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 .cse4) .cse3 (not (<= 1 |old(~waterLevel~0)|)) (and .cse0 .cse4))))) [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point L532(lines 532 538) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point L115-1(lines 114 133) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point L528(lines 528 541) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L854 garLoopResultBuilder]: At program point L528-1(lines 520 544) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 (and .cse2 .cse3 .cse4) .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))) (let ((.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and .cse2 .cse3 (<= 1 ~waterLevel~0) .cse4 .cse5) (and (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (not (<= 2 |old(~waterLevel~0)|)))))) [2022-02-20 18:11:42,006 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-02-20 18:11:42,006 INFO L854 garLoopResultBuilder]: At program point L269(lines 264 272) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,007 INFO L854 garLoopResultBuilder]: At program point L492(lines 487 495) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse2 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (<= 2 ~waterLevel~0))) (and (let ((.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (and .cse4 (<= 1 ~waterLevel~0) .cse2 .cse3) (not (<= 2 |old(~waterLevel~0)|)))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse4 .cse2 .cse5) (not (<= 1 |old(~waterLevel~0)|)) (and .cse1 .cse5))))) [2022-02-20 18:11:42,007 INFO L858 garLoopResultBuilder]: For program point L203(lines 203 211) no Hoare annotation was computed. [2022-02-20 18:11:42,007 INFO L858 garLoopResultBuilder]: For program point L199(lines 199 216) no Hoare annotation was computed. [2022-02-20 18:11:42,007 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,007 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 111 134) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:42,007 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 111 134) no Hoare annotation was computed. [2022-02-20 18:11:42,008 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-02-20 18:11:42,008 INFO L858 garLoopResultBuilder]: For program point L423(lines 423 427) no Hoare annotation was computed. [2022-02-20 18:11:42,008 INFO L854 garLoopResultBuilder]: At program point L423-2(lines 419 430) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-02-20 18:11:42,008 INFO L854 garLoopResultBuilder]: At program point L407(lines 360 408) the Hoare annotation is: false [2022-02-20 18:11:42,008 INFO L861 garLoopResultBuilder]: At program point L981(lines 974 983) the Hoare annotation is: true [2022-02-20 18:11:42,008 INFO L854 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L362(lines 361 406) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L391(lines 391 402) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L994(lines 994 1001) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L994-2(lines 994 1001) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L854 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L854 garLoopResultBuilder]: At program point L404(lines 361 406) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L371(lines 371 377) no Hoare annotation was computed. [2022-02-20 18:11:42,009 INFO L858 garLoopResultBuilder]: For program point L371-1(lines 371 377) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L858 garLoopResultBuilder]: For program point L363(lines 363 367) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L861 garLoopResultBuilder]: At program point L1003(lines 984 1006) the Hoare annotation is: true [2022-02-20 18:11:42,010 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L858 garLoopResultBuilder]: For program point L397(lines 397 401) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L854 garLoopResultBuilder]: At program point L971(lines 967 973) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-02-20 18:11:42,010 INFO L854 garLoopResultBuilder]: At program point L397-2(lines 391 402) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-02-20 18:11:42,010 INFO L858 garLoopResultBuilder]: For program point L381(lines 381 387) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L854 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-02-20 18:11:42,010 INFO L858 garLoopResultBuilder]: For program point L381-1(lines 381 387) no Hoare annotation was computed. [2022-02-20 18:11:42,010 INFO L861 garLoopResultBuilder]: At program point L410(lines 351 414) the Hoare annotation is: true [2022-02-20 18:11:42,011 INFO L854 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-02-20 18:11:42,011 INFO L854 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-02-20 18:11:42,011 INFO L854 garLoopResultBuilder]: At program point L225(lines 220 227) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))) [2022-02-20 18:11:42,011 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 143 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))))) [2022-02-20 18:11:42,011 INFO L858 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-02-20 18:11:42,011 INFO L854 garLoopResultBuilder]: At program point L157(line 157) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (not (<= 1 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)))) [2022-02-20 18:11:42,011 INFO L858 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2022-02-20 18:11:42,011 INFO L858 garLoopResultBuilder]: For program point L151(lines 151 159) no Hoare annotation was computed. [2022-02-20 18:11:42,011 INFO L858 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2022-02-20 18:11:42,012 INFO L858 garLoopResultBuilder]: For program point L147(lines 147 164) no Hoare annotation was computed. [2022-02-20 18:11:42,012 INFO L854 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-02-20 18:11:42,012 INFO L858 garLoopResultBuilder]: For program point L162-1(lines 143 167) no Hoare annotation was computed. [2022-02-20 18:11:42,012 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 143 167) no Hoare annotation was computed. [2022-02-20 18:11:42,012 INFO L854 garLoopResultBuilder]: At program point L505(lines 496 509) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0))) [2022-02-20 18:11:42,012 INFO L858 garLoopResultBuilder]: For program point L235(lines 235 241) no Hoare annotation was computed. [2022-02-20 18:11:42,012 INFO L854 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0))) (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))))) [2022-02-20 18:11:42,013 INFO L854 garLoopResultBuilder]: At program point L235-2(lines 228 244) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))) [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point L233-1(line 233) no Hoare annotation was computed. [2022-02-20 18:11:42,013 INFO L854 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)))) [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 431 442) no Hoare annotation was computed. [2022-02-20 18:11:42,013 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 431 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point L435-1(lines 431 442) no Hoare annotation was computed. [2022-02-20 18:11:42,013 INFO L854 garLoopResultBuilder]: At program point L188(line 188) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point L188-1(lines 169 193) no Hoare annotation was computed. [2022-02-20 18:11:42,013 INFO L854 garLoopResultBuilder]: At program point L343(lines 328 346) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point L337(lines 337 341) no Hoare annotation was computed. [2022-02-20 18:11:42,013 INFO L858 garLoopResultBuilder]: For program point L337-2(lines 337 341) no Hoare annotation was computed. [2022-02-20 18:11:42,014 INFO L854 garLoopResultBuilder]: At program point L515(lines 510 518) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-02-20 18:11:42,014 INFO L854 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-02-20 18:11:42,014 INFO L854 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-02-20 18:11:42,014 INFO L858 garLoopResultBuilder]: For program point L177(lines 177 185) no Hoare annotation was computed. [2022-02-20 18:11:42,014 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 169 193) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-02-20 18:11:42,014 INFO L858 garLoopResultBuilder]: For program point L173(lines 173 190) no Hoare annotation was computed. [2022-02-20 18:11:42,014 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 169 193) no Hoare annotation was computed. [2022-02-20 18:11:42,014 INFO L861 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 253 263) the Hoare annotation is: true [2022-02-20 18:11:42,014 INFO L861 garLoopResultBuilder]: At program point L460(lines 455 463) the Hoare annotation is: true [2022-02-20 18:11:42,015 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 253 263) no Hoare annotation was computed. [2022-02-20 18:11:42,015 INFO L858 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 253 263) no Hoare annotation was computed. [2022-02-20 18:11:42,017 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:42,018 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:11:42,021 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:11:42,021 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:42,021 WARN L170 areAnnotationChecker]: L447-1 has no Hoare annotation [2022-02-20 18:11:42,021 WARN L170 areAnnotationChecker]: L447-1 has no Hoare annotation [2022-02-20 18:11:42,021 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L147 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L435-1 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L435-1 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:11:42,022 WARN L170 areAnnotationChecker]: L447-1 has no Hoare annotation [2022-02-20 18:11:42,023 WARN L170 areAnnotationChecker]: L919-1 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L423 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L147 has no Hoare annotation [2022-02-20 18:11:42,024 WARN L170 areAnnotationChecker]: L147 has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: L435-1 has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: L162-1 has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:11:42,025 WARN L170 areAnnotationChecker]: L919-1 has no Hoare annotation [2022-02-20 18:11:42,026 WARN L170 areAnnotationChecker]: L115-1 has no Hoare annotation [2022-02-20 18:11:42,026 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-02-20 18:11:42,026 WARN L170 areAnnotationChecker]: L199 has no Hoare annotation [2022-02-20 18:11:42,026 WARN L170 areAnnotationChecker]: L122-1 has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: L500 has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: L500 has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: L162-1 has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-02-20 18:11:42,027 WARN L170 areAnnotationChecker]: L188-1 has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: isMethaneAlarmFINAL has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: L122-1 has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: L188-1 has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:11:42,028 WARN L170 areAnnotationChecker]: L381-1 has no Hoare annotation [2022-02-20 18:11:42,029 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-02-20 18:11:42,029 WARN L170 areAnnotationChecker]: L201-1 has no Hoare annotation [2022-02-20 18:11:42,029 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: L318 has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: L371-1 has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: isMethaneAlarmEXIT has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:11:42,030 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__methaneQueryEXIT has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L391 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L391 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L201-1 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L994 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L318 has no Hoare annotation [2022-02-20 18:11:42,031 WARN L170 areAnnotationChecker]: L318 has no Hoare annotation [2022-02-20 18:11:42,032 WARN L170 areAnnotationChecker]: L381 has no Hoare annotation [2022-02-20 18:11:42,032 WARN L170 areAnnotationChecker]: L381 has no Hoare annotation [2022-02-20 18:11:42,032 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2022-02-20 18:11:42,032 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L397 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L397 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L927 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L927 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:42,033 WARN L170 areAnnotationChecker]: L994 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L994 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L318-2 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L381-1 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L235 has no Hoare annotation [2022-02-20 18:11:42,034 WARN L170 areAnnotationChecker]: L235 has no Hoare annotation [2022-02-20 18:11:42,036 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:11:42,036 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-02-20 18:11:42,037 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-02-20 18:11:42,037 WARN L170 areAnnotationChecker]: L532 has no Hoare annotation [2022-02-20 18:11:42,037 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:11:42,038 WARN L170 areAnnotationChecker]: L994-2 has no Hoare annotation [2022-02-20 18:11:42,038 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:11:42,038 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-02-20 18:11:42,038 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-02-20 18:11:42,038 WARN L170 areAnnotationChecker]: L162-1 has no Hoare annotation [2022-02-20 18:11:42,039 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:11:42,039 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:11:42,039 WARN L170 areAnnotationChecker]: L994-2 has no Hoare annotation [2022-02-20 18:11:42,039 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2022-02-20 18:11:42,039 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:11:42,040 WARN L170 areAnnotationChecker]: L188-1 has no Hoare annotation [2022-02-20 18:11:42,041 WARN L170 areAnnotationChecker]: L188-1 has no Hoare annotation [2022-02-20 18:11:42,042 WARN L170 areAnnotationChecker]: L363 has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: L233-1 has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: L162-1 has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: L371 has no Hoare annotation [2022-02-20 18:11:42,043 WARN L170 areAnnotationChecker]: L371-1 has no Hoare annotation [2022-02-20 18:11:42,044 INFO L163 areAnnotationChecker]: CFG has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:11:42,081 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:11:42 BoogieIcfgContainer [2022-02-20 18:11:42,081 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:11:42,082 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:11:42,082 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:11:42,082 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:11:42,083 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:19" (3/4) ... [2022-02-20 18:11:42,085 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:11:42,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:11:42,088 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:11:42,089 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-02-20 18:11:42,090 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-02-20 18:11:42,100 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 54 nodes and edges [2022-02-20 18:11:42,101 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:11:42,101 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:11:42,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:11:42,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:11:42,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:42,102 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:11:42,121 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-02-20 18:11:42,122 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && waterLevel <= \old(waterLevel)) || ((pumpRunning == 0 && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-02-20 18:11:42,123 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((2 <= waterLevel && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-02-20 18:11:42,124 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= tmp) && 1 <= \result)) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((2 <= waterLevel && 1 <= tmp) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= waterLevel)) || (pumpRunning == \old(pumpRunning) && \result == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) [2022-02-20 18:11:42,125 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-02-20 18:11:42,128 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((1 <= \result && pumpRunning == 0) && 1 <= tmp) && \result == 0) && tmp___0 == 0) [2022-02-20 18:11:42,150 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:11:42,152 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:11:42,153 INFO L158 Benchmark]: Toolchain (without parser) took 23422.92ms. Allocated memory was 111.1MB in the beginning and 327.2MB in the end (delta: 216.0MB). Free memory was 80.7MB in the beginning and 294.8MB in the end (delta: -214.0MB). Peak memory consumption was 1.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,153 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 111.1MB. Free memory is still 66.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:42,154 INFO L158 Benchmark]: CACSL2BoogieTranslator took 416.01ms. Allocated memory is still 111.1MB. Free memory was 80.7MB in the beginning and 75.8MB in the end (delta: 4.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,154 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.14ms. Allocated memory is still 111.1MB. Free memory was 75.8MB in the beginning and 73.0MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,154 INFO L158 Benchmark]: Boogie Preprocessor took 36.66ms. Allocated memory is still 111.1MB. Free memory was 73.0MB in the beginning and 70.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,155 INFO L158 Benchmark]: RCFGBuilder took 514.59ms. Allocated memory was 111.1MB in the beginning and 148.9MB in the end (delta: 37.7MB). Free memory was 70.9MB in the beginning and 123.1MB in the end (delta: -52.2MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,155 INFO L158 Benchmark]: TraceAbstraction took 22324.33ms. Allocated memory was 148.9MB in the beginning and 327.2MB in the end (delta: 178.3MB). Free memory was 122.4MB in the beginning and 300.0MB in the end (delta: -177.6MB). Peak memory consumption was 196.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,155 INFO L158 Benchmark]: Witness Printer took 69.93ms. Allocated memory is still 327.2MB. Free memory was 300.0MB in the beginning and 294.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:11:42,156 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 111.1MB. Free memory is still 66.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 416.01ms. Allocated memory is still 111.1MB. Free memory was 80.7MB in the beginning and 75.8MB in the end (delta: 4.9MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.14ms. Allocated memory is still 111.1MB. Free memory was 75.8MB in the beginning and 73.0MB in the end (delta: 2.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.66ms. Allocated memory is still 111.1MB. Free memory was 73.0MB in the beginning and 70.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 514.59ms. Allocated memory was 111.1MB in the beginning and 148.9MB in the end (delta: 37.7MB). Free memory was 70.9MB in the beginning and 123.1MB in the end (delta: -52.2MB). Peak memory consumption was 25.9MB. Max. memory is 16.1GB. * TraceAbstraction took 22324.33ms. Allocated memory was 148.9MB in the beginning and 327.2MB in the end (delta: 178.3MB). Free memory was 122.4MB in the beginning and 300.0MB in the end (delta: -177.6MB). Peak memory consumption was 196.1MB. Max. memory is 16.1GB. * Witness Printer took 69.93ms. Allocated memory is still 327.2MB. Free memory was 300.0MB in the beginning and 294.8MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 22.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.0s, AutomataDifference: 11.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1975 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1937 mSDsluCounter, 4269 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2822 mSDsCounter, 650 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2613 IncrementalHoareTripleChecker+Invalid, 3263 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 650 mSolverCounterUnsat, 1447 mSDtfsCounter, 2613 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 881 GetRequests, 743 SyntacticMatches, 10 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=826occurred in iteration=11, InterpolantAutomatonStates: 121, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 301 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 1939 PreInvPairs, 2059 NumberOfFragments, 1054 HoareAnnotationTreeSize, 1939 FomulaSimplifications, 4286 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 48 FomulaSimplificationsInter, 7510 FormulaSimplificationTreeSizeReductionInter, 1.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.7s InterpolantComputationTime, 1296 NumberOfCodeBlocks, 1248 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 1380 ConstructedInterpolants, 0 QuantifiedInterpolants, 2547 SizeOfPredicates, 11 NumberOfNonLiveVariables, 2038 ConjunctsInSsa, 27 ConjunctsInUnsatCore, 17 InterpolantComputations, 11 PerfectInterpolantSequences, 486/548 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && waterLevel <= \old(waterLevel)) || ((pumpRunning == 0 && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0) - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((1 <= \result && pumpRunning == 0) && 1 <= tmp) && \result == 0) && tmp___0 == 0) - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 974]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || \old(waterLevel) == waterLevel) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= tmp) && 1 <= \result)) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((2 <= waterLevel && 1 <= tmp) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((2 <= waterLevel && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= waterLevel)) || (pumpRunning == \old(pumpRunning) && \result == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) - InvariantResult [Line: 923]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-02-20 18:11:42,216 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE