./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 45558e1c10008e5b16efe572a84fcf92b08797f54d586c51d45827b7e38254a6 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:25,782 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:25,784 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:25,820 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:25,821 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:25,824 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:25,825 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:25,827 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:25,829 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:25,833 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:25,834 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:25,835 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:25,835 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:25,837 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:25,838 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:25,839 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:25,842 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:25,843 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:25,844 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:25,846 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:25,849 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:25,850 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:25,851 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:25,852 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:25,855 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:25,855 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:25,856 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:25,857 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:25,857 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:25,858 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:25,858 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:25,859 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:25,860 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:25,861 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:25,861 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:25,862 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:25,862 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:25,862 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:25,862 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:25,863 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:25,863 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:25,864 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:11:25,889 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:25,889 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:25,890 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:25,890 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:25,891 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:25,891 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:25,891 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:25,891 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:25,891 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:25,892 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:25,892 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:25,893 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:25,894 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:25,894 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:25,895 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:25,895 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:25,895 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:25,896 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:25,896 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:11:25,897 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:11:25,897 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:25,897 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:25,897 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:25,897 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 45558e1c10008e5b16efe572a84fcf92b08797f54d586c51d45827b7e38254a6 [2022-02-20 18:11:26,131 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:26,147 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:26,149 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:26,150 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:26,150 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:26,151 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:26,199 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a887286d3/1c3123f31c35439ba29219d95eabb6c3/FLAG62de9b8a1 [2022-02-20 18:11:26,563 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:26,565 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:26,575 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a887286d3/1c3123f31c35439ba29219d95eabb6c3/FLAG62de9b8a1 [2022-02-20 18:11:26,942 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a887286d3/1c3123f31c35439ba29219d95eabb6c3 [2022-02-20 18:11:26,947 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:26,948 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:26,960 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:26,960 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:26,963 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:26,971 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:26" (1/1) ... [2022-02-20 18:11:26,972 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3088b21c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:26, skipping insertion in model container [2022-02-20 18:11:26,972 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:26" (1/1) ... [2022-02-20 18:11:26,977 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:27,035 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:27,212 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c[9333,9346] [2022-02-20 18:11:27,252 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:27,259 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:27,289 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c[9333,9346] [2022-02-20 18:11:27,314 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:27,327 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:27,328 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27 WrapperNode [2022-02-20 18:11:27,328 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:27,329 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:27,329 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:27,329 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:27,334 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,344 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,378 INFO L137 Inliner]: procedures = 63, calls = 177, calls flagged for inlining = 29, calls inlined = 26, statements flattened = 351 [2022-02-20 18:11:27,382 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:27,383 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:27,383 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:27,384 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:27,389 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,390 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,402 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,403 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,408 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,411 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,413 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,414 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:27,415 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:27,415 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:27,415 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:27,427 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (1/1) ... [2022-02-20 18:11:27,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:27,440 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:27,452 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:27,469 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:27,491 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:27,492 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:11:27,492 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:11:27,492 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:27,492 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:27,492 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:27,492 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:27,492 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:11:27,493 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:11:27,493 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:27,493 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:27,493 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:11:27,494 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:11:27,494 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:11:27,494 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:11:27,494 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:11:27,494 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:11:27,494 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:11:27,494 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:11:27,494 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:11:27,495 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:11:27,495 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:11:27,495 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:27,495 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:27,495 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:27,495 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:27,595 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:27,596 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:28,013 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:28,021 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:28,023 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:28,026 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:28 BoogieIcfgContainer [2022-02-20 18:11:28,026 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:28,027 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:28,027 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:28,030 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:28,030 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:26" (1/3) ... [2022-02-20 18:11:28,031 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6f2e5602 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:28, skipping insertion in model container [2022-02-20 18:11:28,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:27" (2/3) ... [2022-02-20 18:11:28,031 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6f2e5602 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:28, skipping insertion in model container [2022-02-20 18:11:28,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:28" (3/3) ... [2022-02-20 18:11:28,033 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:28,036 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:28,037 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:28,080 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:28,088 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:28,088 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:28,115 INFO L276 IsEmpty]: Start isEmpty. Operand has 138 states, 97 states have (on average 1.3711340206185567) internal successors, (133), 113 states have internal predecessors, (133), 28 states have call successors, (28), 11 states have call predecessors, (28), 11 states have return successors, (28), 23 states have call predecessors, (28), 28 states have call successors, (28) [2022-02-20 18:11:28,122 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-20 18:11:28,122 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:28,123 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:28,123 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:28,127 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:28,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1286926384, now seen corresponding path program 1 times [2022-02-20 18:11:28,134 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:28,134 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1484328121] [2022-02-20 18:11:28,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:28,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:28,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:28,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,364 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,365 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,365 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #351#return; {141#true} is VALID [2022-02-20 18:11:28,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:28,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,372 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,372 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,372 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #353#return; {141#true} is VALID [2022-02-20 18:11:28,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:28,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,377 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,377 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,377 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #355#return; {141#true} is VALID [2022-02-20 18:11:28,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:28,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,382 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,382 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,383 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #357#return; {141#true} is VALID [2022-02-20 18:11:28,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:28,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,388 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,389 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,389 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #359#return; {141#true} is VALID [2022-02-20 18:11:28,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:28,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:28,394 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,394 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,395 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {141#true} {141#true} #361#return; {141#true} is VALID [2022-02-20 18:11:28,417 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {141#true} is VALID [2022-02-20 18:11:28,418 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {141#true} is VALID [2022-02-20 18:11:28,418 INFO L290 TraceCheckUtils]: 2: Hoare triple {141#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {141#true} is VALID [2022-02-20 18:11:28,418 INFO L272 TraceCheckUtils]: 3: Hoare triple {141#true} call select_features_#t~ret55#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,418 INFO L290 TraceCheckUtils]: 4: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,419 INFO L290 TraceCheckUtils]: 5: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,419 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {141#true} {141#true} #351#return; {141#true} is VALID [2022-02-20 18:11:28,419 INFO L290 TraceCheckUtils]: 7: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {141#true} is VALID [2022-02-20 18:11:28,419 INFO L272 TraceCheckUtils]: 8: Hoare triple {141#true} call select_features_#t~ret56#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,419 INFO L290 TraceCheckUtils]: 9: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,420 INFO L290 TraceCheckUtils]: 10: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,420 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {141#true} {141#true} #353#return; {141#true} is VALID [2022-02-20 18:11:28,420 INFO L290 TraceCheckUtils]: 12: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {141#true} is VALID [2022-02-20 18:11:28,420 INFO L272 TraceCheckUtils]: 13: Hoare triple {141#true} call select_features_#t~ret57#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,420 INFO L290 TraceCheckUtils]: 14: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,420 INFO L290 TraceCheckUtils]: 15: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,421 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {141#true} {141#true} #355#return; {141#true} is VALID [2022-02-20 18:11:28,421 INFO L290 TraceCheckUtils]: 17: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {141#true} is VALID [2022-02-20 18:11:28,421 INFO L272 TraceCheckUtils]: 18: Hoare triple {141#true} call select_features_#t~ret58#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,421 INFO L290 TraceCheckUtils]: 19: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,421 INFO L290 TraceCheckUtils]: 20: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,422 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {141#true} {141#true} #357#return; {141#true} is VALID [2022-02-20 18:11:28,422 INFO L290 TraceCheckUtils]: 22: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {141#true} is VALID [2022-02-20 18:11:28,422 INFO L272 TraceCheckUtils]: 23: Hoare triple {141#true} call select_features_#t~ret59#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,422 INFO L290 TraceCheckUtils]: 24: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,422 INFO L290 TraceCheckUtils]: 25: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,423 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {141#true} {141#true} #359#return; {141#true} is VALID [2022-02-20 18:11:28,423 INFO L290 TraceCheckUtils]: 27: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {141#true} is VALID [2022-02-20 18:11:28,423 INFO L272 TraceCheckUtils]: 28: Hoare triple {141#true} call select_features_#t~ret60#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:28,423 INFO L290 TraceCheckUtils]: 29: Hoare triple {141#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:28,423 INFO L290 TraceCheckUtils]: 30: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:28,424 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {141#true} {141#true} #361#return; {141#true} is VALID [2022-02-20 18:11:28,424 INFO L290 TraceCheckUtils]: 32: Hoare triple {141#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {141#true} is VALID [2022-02-20 18:11:28,424 INFO L290 TraceCheckUtils]: 33: Hoare triple {141#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {141#true} is VALID [2022-02-20 18:11:28,424 INFO L290 TraceCheckUtils]: 34: Hoare triple {141#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {141#true} is VALID [2022-02-20 18:11:28,424 INFO L290 TraceCheckUtils]: 35: Hoare triple {141#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {141#true} is VALID [2022-02-20 18:11:28,425 INFO L290 TraceCheckUtils]: 36: Hoare triple {141#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {141#true} is VALID [2022-02-20 18:11:28,426 INFO L290 TraceCheckUtils]: 37: Hoare triple {141#true} assume !true; {142#false} is VALID [2022-02-20 18:11:28,426 INFO L272 TraceCheckUtils]: 38: Hoare triple {142#false} call cleanup(); {142#false} is VALID [2022-02-20 18:11:28,426 INFO L290 TraceCheckUtils]: 39: Hoare triple {142#false} havoc ~i~0;havoc ~__cil_tmp2~0; {142#false} is VALID [2022-02-20 18:11:28,426 INFO L272 TraceCheckUtils]: 40: Hoare triple {142#false} call timeShift(); {142#false} is VALID [2022-02-20 18:11:28,426 INFO L290 TraceCheckUtils]: 41: Hoare triple {142#false} assume !(0 != ~pumpRunning~0); {142#false} is VALID [2022-02-20 18:11:28,426 INFO L290 TraceCheckUtils]: 42: Hoare triple {142#false} assume !(0 != ~systemActive~0); {142#false} is VALID [2022-02-20 18:11:28,427 INFO L290 TraceCheckUtils]: 43: Hoare triple {142#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {142#false} is VALID [2022-02-20 18:11:28,427 INFO L290 TraceCheckUtils]: 44: Hoare triple {142#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {142#false} is VALID [2022-02-20 18:11:28,427 INFO L290 TraceCheckUtils]: 45: Hoare triple {142#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {142#false} is VALID [2022-02-20 18:11:28,427 INFO L290 TraceCheckUtils]: 46: Hoare triple {142#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {142#false} is VALID [2022-02-20 18:11:28,428 INFO L290 TraceCheckUtils]: 47: Hoare triple {142#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {142#false} is VALID [2022-02-20 18:11:28,428 INFO L290 TraceCheckUtils]: 48: Hoare triple {142#false} assume !false; {142#false} is VALID [2022-02-20 18:11:28,428 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:28,429 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:28,429 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1484328121] [2022-02-20 18:11:28,430 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1484328121] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:28,430 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:28,430 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:28,431 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1402448495] [2022-02-20 18:11:28,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:28,435 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 49 [2022-02-20 18:11:28,436 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:28,439 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:28,470 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:28,470 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:28,471 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:28,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:28,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:28,487 INFO L87 Difference]: Start difference. First operand has 138 states, 97 states have (on average 1.3711340206185567) internal successors, (133), 113 states have internal predecessors, (133), 28 states have call successors, (28), 11 states have call predecessors, (28), 11 states have return successors, (28), 23 states have call predecessors, (28), 28 states have call successors, (28) Second operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:28,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:28,595 INFO L93 Difference]: Finished difference Result 253 states and 353 transitions. [2022-02-20 18:11:28,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:28,595 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 49 [2022-02-20 18:11:28,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:28,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:28,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 353 transitions. [2022-02-20 18:11:28,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:28,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 353 transitions. [2022-02-20 18:11:28,617 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 353 transitions. [2022-02-20 18:11:28,853 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 353 edges. 353 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:28,863 INFO L225 Difference]: With dead ends: 253 [2022-02-20 18:11:28,863 INFO L226 Difference]: Without dead ends: 129 [2022-02-20 18:11:28,866 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:28,869 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:28,869 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:28,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-02-20 18:11:28,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 129. [2022-02-20 18:11:28,896 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:28,897 INFO L82 GeneralOperation]: Start isEquivalent. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:28,898 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:28,899 INFO L87 Difference]: Start difference. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:28,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:28,906 INFO L93 Difference]: Finished difference Result 129 states and 174 transitions. [2022-02-20 18:11:28,906 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:28,908 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:28,909 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:28,909 INFO L74 IsIncluded]: Start isIncluded. First operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 129 states. [2022-02-20 18:11:28,910 INFO L87 Difference]: Start difference. First operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 129 states. [2022-02-20 18:11:28,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:28,916 INFO L93 Difference]: Finished difference Result 129 states and 174 transitions. [2022-02-20 18:11:28,916 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:28,918 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:28,919 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:28,919 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:28,919 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:28,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:28,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 174 transitions. [2022-02-20 18:11:28,926 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 174 transitions. Word has length 49 [2022-02-20 18:11:28,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:28,926 INFO L470 AbstractCegarLoop]: Abstraction has 129 states and 174 transitions. [2022-02-20 18:11:28,927 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:28,927 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:28,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-02-20 18:11:28,928 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:28,928 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:28,929 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:11:28,929 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:28,931 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:28,931 INFO L85 PathProgramCache]: Analyzing trace with hash -1245192373, now seen corresponding path program 1 times [2022-02-20 18:11:28,932 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:28,932 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1179638491] [2022-02-20 18:11:28,932 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:28,932 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:28,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:29,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,022 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,023 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,023 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #351#return; {987#true} is VALID [2022-02-20 18:11:29,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:29,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,028 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,028 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,028 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #353#return; {987#true} is VALID [2022-02-20 18:11:29,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:29,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,032 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,033 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,033 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #355#return; {987#true} is VALID [2022-02-20 18:11:29,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:29,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,038 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,038 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,038 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #357#return; {987#true} is VALID [2022-02-20 18:11:29,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:29,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,043 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,043 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,043 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #359#return; {987#true} is VALID [2022-02-20 18:11:29,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:29,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,048 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,049 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,049 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {987#true} {987#true} #361#return; {987#true} is VALID [2022-02-20 18:11:29,049 INFO L290 TraceCheckUtils]: 0: Hoare triple {987#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {987#true} is VALID [2022-02-20 18:11:29,049 INFO L290 TraceCheckUtils]: 1: Hoare triple {987#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {987#true} is VALID [2022-02-20 18:11:29,050 INFO L290 TraceCheckUtils]: 2: Hoare triple {987#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {987#true} is VALID [2022-02-20 18:11:29,050 INFO L272 TraceCheckUtils]: 3: Hoare triple {987#true} call select_features_#t~ret55#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,050 INFO L290 TraceCheckUtils]: 4: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,050 INFO L290 TraceCheckUtils]: 5: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,051 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {987#true} {987#true} #351#return; {987#true} is VALID [2022-02-20 18:11:29,051 INFO L290 TraceCheckUtils]: 7: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {987#true} is VALID [2022-02-20 18:11:29,051 INFO L272 TraceCheckUtils]: 8: Hoare triple {987#true} call select_features_#t~ret56#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,051 INFO L290 TraceCheckUtils]: 9: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,051 INFO L290 TraceCheckUtils]: 10: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,052 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {987#true} {987#true} #353#return; {987#true} is VALID [2022-02-20 18:11:29,052 INFO L290 TraceCheckUtils]: 12: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {987#true} is VALID [2022-02-20 18:11:29,052 INFO L272 TraceCheckUtils]: 13: Hoare triple {987#true} call select_features_#t~ret57#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,052 INFO L290 TraceCheckUtils]: 14: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,052 INFO L290 TraceCheckUtils]: 15: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,053 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {987#true} {987#true} #355#return; {987#true} is VALID [2022-02-20 18:11:29,053 INFO L290 TraceCheckUtils]: 17: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {987#true} is VALID [2022-02-20 18:11:29,053 INFO L272 TraceCheckUtils]: 18: Hoare triple {987#true} call select_features_#t~ret58#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,053 INFO L290 TraceCheckUtils]: 19: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,053 INFO L290 TraceCheckUtils]: 20: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,054 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {987#true} {987#true} #357#return; {987#true} is VALID [2022-02-20 18:11:29,054 INFO L290 TraceCheckUtils]: 22: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {987#true} is VALID [2022-02-20 18:11:29,054 INFO L272 TraceCheckUtils]: 23: Hoare triple {987#true} call select_features_#t~ret59#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,054 INFO L290 TraceCheckUtils]: 24: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,054 INFO L290 TraceCheckUtils]: 25: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,055 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {987#true} {987#true} #359#return; {987#true} is VALID [2022-02-20 18:11:29,055 INFO L290 TraceCheckUtils]: 27: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {987#true} is VALID [2022-02-20 18:11:29,055 INFO L272 TraceCheckUtils]: 28: Hoare triple {987#true} call select_features_#t~ret60#1 := select_one(); {987#true} is VALID [2022-02-20 18:11:29,055 INFO L290 TraceCheckUtils]: 29: Hoare triple {987#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {987#true} is VALID [2022-02-20 18:11:29,055 INFO L290 TraceCheckUtils]: 30: Hoare triple {987#true} assume true; {987#true} is VALID [2022-02-20 18:11:29,056 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {987#true} {987#true} #361#return; {987#true} is VALID [2022-02-20 18:11:29,056 INFO L290 TraceCheckUtils]: 32: Hoare triple {987#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {987#true} is VALID [2022-02-20 18:11:29,056 INFO L290 TraceCheckUtils]: 33: Hoare triple {987#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {987#true} is VALID [2022-02-20 18:11:29,056 INFO L290 TraceCheckUtils]: 34: Hoare triple {987#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {987#true} is VALID [2022-02-20 18:11:29,056 INFO L290 TraceCheckUtils]: 35: Hoare triple {987#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {987#true} is VALID [2022-02-20 18:11:29,057 INFO L290 TraceCheckUtils]: 36: Hoare triple {987#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1007#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:29,058 INFO L290 TraceCheckUtils]: 37: Hoare triple {1007#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {1007#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:29,058 INFO L290 TraceCheckUtils]: 38: Hoare triple {1007#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {988#false} is VALID [2022-02-20 18:11:29,058 INFO L272 TraceCheckUtils]: 39: Hoare triple {988#false} call cleanup(); {988#false} is VALID [2022-02-20 18:11:29,059 INFO L290 TraceCheckUtils]: 40: Hoare triple {988#false} havoc ~i~0;havoc ~__cil_tmp2~0; {988#false} is VALID [2022-02-20 18:11:29,059 INFO L272 TraceCheckUtils]: 41: Hoare triple {988#false} call timeShift(); {988#false} is VALID [2022-02-20 18:11:29,059 INFO L290 TraceCheckUtils]: 42: Hoare triple {988#false} assume !(0 != ~pumpRunning~0); {988#false} is VALID [2022-02-20 18:11:29,059 INFO L290 TraceCheckUtils]: 43: Hoare triple {988#false} assume !(0 != ~systemActive~0); {988#false} is VALID [2022-02-20 18:11:29,059 INFO L290 TraceCheckUtils]: 44: Hoare triple {988#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {988#false} is VALID [2022-02-20 18:11:29,060 INFO L290 TraceCheckUtils]: 45: Hoare triple {988#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {988#false} is VALID [2022-02-20 18:11:29,060 INFO L290 TraceCheckUtils]: 46: Hoare triple {988#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {988#false} is VALID [2022-02-20 18:11:29,060 INFO L290 TraceCheckUtils]: 47: Hoare triple {988#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {988#false} is VALID [2022-02-20 18:11:29,060 INFO L290 TraceCheckUtils]: 48: Hoare triple {988#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {988#false} is VALID [2022-02-20 18:11:29,061 INFO L290 TraceCheckUtils]: 49: Hoare triple {988#false} assume !false; {988#false} is VALID [2022-02-20 18:11:29,061 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:29,061 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:29,061 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1179638491] [2022-02-20 18:11:29,062 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1179638491] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:29,062 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:29,062 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:29,062 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [804272877] [2022-02-20 18:11:29,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:29,064 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 50 [2022-02-20 18:11:29,064 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:29,064 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,093 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:29,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:29,094 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:29,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:29,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:29,095 INFO L87 Difference]: Start difference. First operand 129 states and 174 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,213 INFO L93 Difference]: Finished difference Result 202 states and 273 transitions. [2022-02-20 18:11:29,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:29,213 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 50 [2022-02-20 18:11:29,214 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:29,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 273 transitions. [2022-02-20 18:11:29,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 273 transitions. [2022-02-20 18:11:29,220 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 273 transitions. [2022-02-20 18:11:29,412 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:29,415 INFO L225 Difference]: With dead ends: 202 [2022-02-20 18:11:29,415 INFO L226 Difference]: Without dead ends: 120 [2022-02-20 18:11:29,416 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:29,417 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 21 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:29,418 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 296 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:29,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2022-02-20 18:11:29,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 120. [2022-02-20 18:11:29,424 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:29,424 INFO L82 GeneralOperation]: Start isEquivalent. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:29,425 INFO L74 IsIncluded]: Start isIncluded. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:29,425 INFO L87 Difference]: Start difference. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:29,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,429 INFO L93 Difference]: Finished difference Result 120 states and 162 transitions. [2022-02-20 18:11:29,429 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:29,430 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:29,430 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:29,431 INFO L74 IsIncluded]: Start isIncluded. First operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) Second operand 120 states. [2022-02-20 18:11:29,431 INFO L87 Difference]: Start difference. First operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) Second operand 120 states. [2022-02-20 18:11:29,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:29,435 INFO L93 Difference]: Finished difference Result 120 states and 162 transitions. [2022-02-20 18:11:29,435 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:29,436 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:29,436 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:29,436 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:29,436 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:29,437 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:29,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 162 transitions. [2022-02-20 18:11:29,441 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 162 transitions. Word has length 50 [2022-02-20 18:11:29,441 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:29,441 INFO L470 AbstractCegarLoop]: Abstraction has 120 states and 162 transitions. [2022-02-20 18:11:29,441 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,441 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:29,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:11:29,442 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:29,442 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:29,443 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:11:29,443 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:29,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:29,443 INFO L85 PathProgramCache]: Analyzing trace with hash -327824829, now seen corresponding path program 1 times [2022-02-20 18:11:29,444 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:29,444 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1120980825] [2022-02-20 18:11:29,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:29,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:29,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:29,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,525 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,525 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,526 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #351#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:29,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,531 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,531 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,532 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #353#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:29,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,537 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,537 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,538 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #355#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:29,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,543 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,544 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #357#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:29,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,549 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,550 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,550 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #359#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:29,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:29,555 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,555 INFO L290 TraceCheckUtils]: 1: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,556 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #361#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,557 INFO L290 TraceCheckUtils]: 0: Hoare triple {1728#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1730#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:29,558 INFO L290 TraceCheckUtils]: 1: Hoare triple {1730#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {1730#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:29,558 INFO L290 TraceCheckUtils]: 2: Hoare triple {1730#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,558 INFO L272 TraceCheckUtils]: 3: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret55#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,559 INFO L290 TraceCheckUtils]: 4: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,559 INFO L290 TraceCheckUtils]: 5: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,559 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #351#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,560 INFO L290 TraceCheckUtils]: 7: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,560 INFO L272 TraceCheckUtils]: 8: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret56#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,560 INFO L290 TraceCheckUtils]: 9: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,560 INFO L290 TraceCheckUtils]: 10: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,561 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #353#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,561 INFO L290 TraceCheckUtils]: 12: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,561 INFO L272 TraceCheckUtils]: 13: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret57#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,561 INFO L290 TraceCheckUtils]: 14: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,562 INFO L290 TraceCheckUtils]: 15: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,562 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #355#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,562 INFO L290 TraceCheckUtils]: 17: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,563 INFO L272 TraceCheckUtils]: 18: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret58#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,563 INFO L290 TraceCheckUtils]: 19: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,563 INFO L290 TraceCheckUtils]: 20: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,563 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #357#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,564 INFO L290 TraceCheckUtils]: 22: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,564 INFO L272 TraceCheckUtils]: 23: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret59#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,564 INFO L290 TraceCheckUtils]: 24: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,564 INFO L290 TraceCheckUtils]: 25: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,565 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #359#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,565 INFO L290 TraceCheckUtils]: 27: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,565 INFO L272 TraceCheckUtils]: 28: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} call select_features_#t~ret60#1 := select_one(); {1728#true} is VALID [2022-02-20 18:11:29,566 INFO L290 TraceCheckUtils]: 29: Hoare triple {1728#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1728#true} is VALID [2022-02-20 18:11:29,566 INFO L290 TraceCheckUtils]: 30: Hoare triple {1728#true} assume true; {1728#true} is VALID [2022-02-20 18:11:29,566 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1728#true} {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} #361#return; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,567 INFO L290 TraceCheckUtils]: 32: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} is VALID [2022-02-20 18:11:29,567 INFO L290 TraceCheckUtils]: 33: Hoare triple {1731#(= ~__SELECTED_FEATURE_base~0 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1750#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} is VALID [2022-02-20 18:11:29,568 INFO L290 TraceCheckUtils]: 34: Hoare triple {1750#(= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {1751#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} is VALID [2022-02-20 18:11:29,568 INFO L290 TraceCheckUtils]: 35: Hoare triple {1751#(= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,568 INFO L290 TraceCheckUtils]: 36: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,569 INFO L290 TraceCheckUtils]: 37: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !false; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,569 INFO L290 TraceCheckUtils]: 38: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0#1 < 4; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,570 INFO L290 TraceCheckUtils]: 39: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,570 INFO L290 TraceCheckUtils]: 40: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~8#1); {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,570 INFO L290 TraceCheckUtils]: 41: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,571 INFO L290 TraceCheckUtils]: 42: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~3#1); {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,571 INFO L290 TraceCheckUtils]: 43: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,572 INFO L290 TraceCheckUtils]: 44: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,572 INFO L290 TraceCheckUtils]: 45: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___1~0#1); {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,573 INFO L272 TraceCheckUtils]: 46: Hoare triple {1752#(not (= 0 ~systemActive~0))} call timeShift(); {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,573 INFO L290 TraceCheckUtils]: 47: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1752#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:11:29,573 INFO L290 TraceCheckUtils]: 48: Hoare triple {1752#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1729#false} is VALID [2022-02-20 18:11:29,573 INFO L290 TraceCheckUtils]: 49: Hoare triple {1729#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {1729#false} is VALID [2022-02-20 18:11:29,574 INFO L290 TraceCheckUtils]: 50: Hoare triple {1729#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {1729#false} is VALID [2022-02-20 18:11:29,574 INFO L290 TraceCheckUtils]: 51: Hoare triple {1729#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {1729#false} is VALID [2022-02-20 18:11:29,574 INFO L290 TraceCheckUtils]: 52: Hoare triple {1729#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {1729#false} is VALID [2022-02-20 18:11:29,574 INFO L290 TraceCheckUtils]: 53: Hoare triple {1729#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1729#false} is VALID [2022-02-20 18:11:29,574 INFO L290 TraceCheckUtils]: 54: Hoare triple {1729#false} assume !false; {1729#false} is VALID [2022-02-20 18:11:29,575 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:29,575 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:29,575 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1120980825] [2022-02-20 18:11:29,575 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1120980825] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:29,575 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:29,576 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:29,576 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1159955938] [2022-02-20 18:11:29,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:29,576 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 55 [2022-02-20 18:11:29,577 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:29,577 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:29,606 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:29,607 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:29,607 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:29,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:29,608 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:29,608 INFO L87 Difference]: Start difference. First operand 120 states and 162 transitions. Second operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:30,757 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:30,758 INFO L93 Difference]: Finished difference Result 451 states and 621 transitions. [2022-02-20 18:11:30,758 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:11:30,758 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 55 [2022-02-20 18:11:30,758 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:30,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:30,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 621 transitions. [2022-02-20 18:11:30,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:30,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 621 transitions. [2022-02-20 18:11:30,774 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 621 transitions. [2022-02-20 18:11:31,175 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 621 edges. 621 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:31,186 INFO L225 Difference]: With dead ends: 451 [2022-02-20 18:11:31,186 INFO L226 Difference]: Without dead ends: 353 [2022-02-20 18:11:31,187 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:11:31,188 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 499 mSDsluCounter, 721 mSDsCounter, 0 mSdLazyCounter, 323 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 499 SdHoareTripleChecker+Valid, 928 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 323 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:31,188 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [499 Valid, 928 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 323 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:31,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 353 states. [2022-02-20 18:11:31,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 353 to 250. [2022-02-20 18:11:31,207 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:31,208 INFO L82 GeneralOperation]: Start isEquivalent. First operand 353 states. Second operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) [2022-02-20 18:11:31,209 INFO L74 IsIncluded]: Start isIncluded. First operand 353 states. Second operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) [2022-02-20 18:11:31,210 INFO L87 Difference]: Start difference. First operand 353 states. Second operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) [2022-02-20 18:11:31,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:31,222 INFO L93 Difference]: Finished difference Result 353 states and 480 transitions. [2022-02-20 18:11:31,222 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 480 transitions. [2022-02-20 18:11:31,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:31,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:31,225 INFO L74 IsIncluded]: Start isIncluded. First operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) Second operand 353 states. [2022-02-20 18:11:31,225 INFO L87 Difference]: Start difference. First operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) Second operand 353 states. [2022-02-20 18:11:31,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:31,236 INFO L93 Difference]: Finished difference Result 353 states and 480 transitions. [2022-02-20 18:11:31,236 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 480 transitions. [2022-02-20 18:11:31,237 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:31,237 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:31,237 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:31,238 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:31,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 178 states have (on average 1.3820224719101124) internal successors, (246), 210 states have internal predecessors, (246), 48 states have call successors, (48), 23 states have call predecessors, (48), 23 states have return successors, (49), 36 states have call predecessors, (49), 48 states have call successors, (49) [2022-02-20 18:11:31,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 343 transitions. [2022-02-20 18:11:31,247 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 343 transitions. Word has length 55 [2022-02-20 18:11:31,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:31,247 INFO L470 AbstractCegarLoop]: Abstraction has 250 states and 343 transitions. [2022-02-20 18:11:31,247 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 4.571428571428571) internal successors, (32), 7 states have internal predecessors, (32), 2 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:31,248 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 343 transitions. [2022-02-20 18:11:31,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-20 18:11:31,248 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:31,249 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:31,249 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:11:31,249 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:31,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:31,249 INFO L85 PathProgramCache]: Analyzing trace with hash -435041523, now seen corresponding path program 1 times [2022-02-20 18:11:31,250 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:31,250 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1971296477] [2022-02-20 18:11:31,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:31,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:31,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:31,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,350 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,350 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,350 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #351#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:31,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,355 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,355 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,356 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #353#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:31,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,360 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,360 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,361 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #355#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:31,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,365 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,365 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,366 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #357#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:31,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,370 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,371 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,371 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #359#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:31,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:31,376 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,376 INFO L290 TraceCheckUtils]: 1: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,376 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #361#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,377 INFO L290 TraceCheckUtils]: 0: Hoare triple {3488#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,377 INFO L290 TraceCheckUtils]: 1: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,377 INFO L290 TraceCheckUtils]: 2: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,378 INFO L272 TraceCheckUtils]: 3: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret55#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,378 INFO L290 TraceCheckUtils]: 4: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,378 INFO L290 TraceCheckUtils]: 5: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,379 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #351#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,379 INFO L290 TraceCheckUtils]: 7: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,379 INFO L272 TraceCheckUtils]: 8: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret56#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,379 INFO L290 TraceCheckUtils]: 9: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,379 INFO L290 TraceCheckUtils]: 10: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,380 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #353#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,380 INFO L290 TraceCheckUtils]: 12: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,380 INFO L272 TraceCheckUtils]: 13: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret57#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,381 INFO L290 TraceCheckUtils]: 14: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,381 INFO L290 TraceCheckUtils]: 15: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,381 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #355#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,382 INFO L290 TraceCheckUtils]: 17: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,382 INFO L272 TraceCheckUtils]: 18: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret58#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,382 INFO L290 TraceCheckUtils]: 19: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,382 INFO L290 TraceCheckUtils]: 20: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,383 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #357#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,383 INFO L290 TraceCheckUtils]: 22: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,383 INFO L272 TraceCheckUtils]: 23: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret59#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,383 INFO L290 TraceCheckUtils]: 24: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,383 INFO L290 TraceCheckUtils]: 25: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,384 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #359#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,384 INFO L290 TraceCheckUtils]: 27: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,384 INFO L272 TraceCheckUtils]: 28: Hoare triple {3490#(= ~waterLevel~0 1)} call select_features_#t~ret60#1 := select_one(); {3488#true} is VALID [2022-02-20 18:11:31,385 INFO L290 TraceCheckUtils]: 29: Hoare triple {3488#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3488#true} is VALID [2022-02-20 18:11:31,385 INFO L290 TraceCheckUtils]: 30: Hoare triple {3488#true} assume true; {3488#true} is VALID [2022-02-20 18:11:31,385 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3488#true} {3490#(= ~waterLevel~0 1)} #361#return; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,386 INFO L290 TraceCheckUtils]: 32: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,386 INFO L290 TraceCheckUtils]: 33: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,386 INFO L290 TraceCheckUtils]: 34: Hoare triple {3490#(= ~waterLevel~0 1)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,387 INFO L290 TraceCheckUtils]: 35: Hoare triple {3490#(= ~waterLevel~0 1)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,387 INFO L290 TraceCheckUtils]: 36: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,388 INFO L290 TraceCheckUtils]: 37: Hoare triple {3490#(= ~waterLevel~0 1)} assume !false; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,388 INFO L290 TraceCheckUtils]: 38: Hoare triple {3490#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,388 INFO L290 TraceCheckUtils]: 39: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,389 INFO L290 TraceCheckUtils]: 40: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~8#1); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,389 INFO L290 TraceCheckUtils]: 41: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,390 INFO L290 TraceCheckUtils]: 42: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~3#1); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,390 INFO L290 TraceCheckUtils]: 43: Hoare triple {3490#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,390 INFO L290 TraceCheckUtils]: 44: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,391 INFO L290 TraceCheckUtils]: 45: Hoare triple {3490#(= ~waterLevel~0 1)} assume 0 != test_~tmp___1~0#1; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,391 INFO L290 TraceCheckUtils]: 46: Hoare triple {3490#(= ~waterLevel~0 1)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,391 INFO L290 TraceCheckUtils]: 47: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,392 INFO L290 TraceCheckUtils]: 48: Hoare triple {3490#(= ~waterLevel~0 1)} ~systemActive~0 := 0; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,392 INFO L290 TraceCheckUtils]: 49: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :end_inline_stopSystem } true; {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,392 INFO L272 TraceCheckUtils]: 50: Hoare triple {3490#(= ~waterLevel~0 1)} call timeShift(); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,393 INFO L290 TraceCheckUtils]: 51: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,393 INFO L290 TraceCheckUtils]: 52: Hoare triple {3490#(= ~waterLevel~0 1)} assume !(0 != ~systemActive~0); {3490#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:11:31,394 INFO L290 TraceCheckUtils]: 53: Hoare triple {3490#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {3509#(= |timeShift_getWaterLevel_#res#1| 1)} is VALID [2022-02-20 18:11:31,394 INFO L290 TraceCheckUtils]: 54: Hoare triple {3509#(= |timeShift_getWaterLevel_#res#1| 1)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {3510#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|) 0)} is VALID [2022-02-20 18:11:31,394 INFO L290 TraceCheckUtils]: 55: Hoare triple {3510#(= (+ (- 1) |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|) 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {3489#false} is VALID [2022-02-20 18:11:31,395 INFO L290 TraceCheckUtils]: 56: Hoare triple {3489#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {3489#false} is VALID [2022-02-20 18:11:31,395 INFO L290 TraceCheckUtils]: 57: Hoare triple {3489#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {3489#false} is VALID [2022-02-20 18:11:31,395 INFO L290 TraceCheckUtils]: 58: Hoare triple {3489#false} assume !false; {3489#false} is VALID [2022-02-20 18:11:31,395 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:31,396 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:31,396 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1971296477] [2022-02-20 18:11:31,396 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1971296477] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:31,396 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:31,396 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:11:31,396 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1483113892] [2022-02-20 18:11:31,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:31,397 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 59 [2022-02-20 18:11:31,397 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:31,397 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:31,430 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:31,430 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:11:31,430 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:31,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:11:31,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:31,431 INFO L87 Difference]: Start difference. First operand 250 states and 343 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:31,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:31,789 INFO L93 Difference]: Finished difference Result 689 states and 982 transitions. [2022-02-20 18:11:31,789 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:11:31,789 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 59 [2022-02-20 18:11:31,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:31,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:31,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 435 transitions. [2022-02-20 18:11:31,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:31,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 435 transitions. [2022-02-20 18:11:31,801 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 435 transitions. [2022-02-20 18:11:32,090 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 435 edges. 435 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:32,115 INFO L225 Difference]: With dead ends: 689 [2022-02-20 18:11:32,115 INFO L226 Difference]: Without dead ends: 461 [2022-02-20 18:11:32,116 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:32,117 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 120 mSDsluCounter, 477 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:32,118 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 651 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:32,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 461 states. [2022-02-20 18:11:32,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 461 to 461. [2022-02-20 18:11:32,140 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:32,141 INFO L82 GeneralOperation]: Start isEquivalent. First operand 461 states. Second operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) [2022-02-20 18:11:32,142 INFO L74 IsIncluded]: Start isIncluded. First operand 461 states. Second operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) [2022-02-20 18:11:32,143 INFO L87 Difference]: Start difference. First operand 461 states. Second operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) [2022-02-20 18:11:32,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:32,157 INFO L93 Difference]: Finished difference Result 461 states and 636 transitions. [2022-02-20 18:11:32,157 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 636 transitions. [2022-02-20 18:11:32,159 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:32,159 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:32,161 INFO L74 IsIncluded]: Start isIncluded. First operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) Second operand 461 states. [2022-02-20 18:11:32,162 INFO L87 Difference]: Start difference. First operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) Second operand 461 states. [2022-02-20 18:11:32,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:32,175 INFO L93 Difference]: Finished difference Result 461 states and 636 transitions. [2022-02-20 18:11:32,175 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 636 transitions. [2022-02-20 18:11:32,177 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:32,177 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:32,177 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:32,177 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:32,178 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 328 states have (on average 1.3719512195121952) internal successors, (450), 388 states have internal predecessors, (450), 90 states have call successors, (90), 45 states have call predecessors, (90), 42 states have return successors, (96), 63 states have call predecessors, (96), 90 states have call successors, (96) [2022-02-20 18:11:32,194 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 636 transitions. [2022-02-20 18:11:32,194 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 636 transitions. Word has length 59 [2022-02-20 18:11:32,195 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:32,195 INFO L470 AbstractCegarLoop]: Abstraction has 461 states and 636 transitions. [2022-02-20 18:11:32,195 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,195 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 636 transitions. [2022-02-20 18:11:32,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:11:32,196 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:32,197 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:32,197 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:11:32,197 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:32,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:32,197 INFO L85 PathProgramCache]: Analyzing trace with hash 323360210, now seen corresponding path program 1 times [2022-02-20 18:11:32,198 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:32,198 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105537544] [2022-02-20 18:11:32,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:32,198 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:32,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:32,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,271 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,271 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,272 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #351#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:32,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,275 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,276 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,276 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #353#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:32,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,280 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,281 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,281 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #355#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:32,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,286 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,286 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,286 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #357#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:32,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,290 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,290 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,291 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #359#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:32,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,294 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,294 INFO L290 TraceCheckUtils]: 1: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,294 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #361#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,295 INFO L290 TraceCheckUtils]: 0: Hoare triple {6114#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,295 INFO L290 TraceCheckUtils]: 1: Hoare triple {6116#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,295 INFO L290 TraceCheckUtils]: 2: Hoare triple {6116#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,296 INFO L272 TraceCheckUtils]: 3: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret55#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,296 INFO L290 TraceCheckUtils]: 4: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,296 INFO L290 TraceCheckUtils]: 5: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,296 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #351#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,297 INFO L290 TraceCheckUtils]: 7: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,297 INFO L272 TraceCheckUtils]: 8: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret56#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,297 INFO L290 TraceCheckUtils]: 9: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,297 INFO L290 TraceCheckUtils]: 10: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,298 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #353#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,298 INFO L290 TraceCheckUtils]: 12: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,298 INFO L272 TraceCheckUtils]: 13: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret57#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,298 INFO L290 TraceCheckUtils]: 14: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,298 INFO L290 TraceCheckUtils]: 15: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,299 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #355#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,299 INFO L290 TraceCheckUtils]: 17: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,299 INFO L272 TraceCheckUtils]: 18: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret58#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,299 INFO L290 TraceCheckUtils]: 19: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,299 INFO L290 TraceCheckUtils]: 20: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,300 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #357#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,300 INFO L290 TraceCheckUtils]: 22: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,300 INFO L272 TraceCheckUtils]: 23: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret59#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,300 INFO L290 TraceCheckUtils]: 24: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,301 INFO L290 TraceCheckUtils]: 25: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,301 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #359#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,301 INFO L290 TraceCheckUtils]: 27: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,301 INFO L272 TraceCheckUtils]: 28: Hoare triple {6116#(= ~pumpRunning~0 0)} call select_features_#t~ret60#1 := select_one(); {6114#true} is VALID [2022-02-20 18:11:32,302 INFO L290 TraceCheckUtils]: 29: Hoare triple {6114#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {6114#true} is VALID [2022-02-20 18:11:32,302 INFO L290 TraceCheckUtils]: 30: Hoare triple {6114#true} assume true; {6114#true} is VALID [2022-02-20 18:11:32,302 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {6114#true} {6116#(= ~pumpRunning~0 0)} #361#return; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,303 INFO L290 TraceCheckUtils]: 32: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,303 INFO L290 TraceCheckUtils]: 33: Hoare triple {6116#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,303 INFO L290 TraceCheckUtils]: 34: Hoare triple {6116#(= ~pumpRunning~0 0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,303 INFO L290 TraceCheckUtils]: 35: Hoare triple {6116#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,304 INFO L290 TraceCheckUtils]: 36: Hoare triple {6116#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,304 INFO L290 TraceCheckUtils]: 37: Hoare triple {6116#(= ~pumpRunning~0 0)} assume !false; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,304 INFO L290 TraceCheckUtils]: 38: Hoare triple {6116#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,305 INFO L290 TraceCheckUtils]: 39: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,305 INFO L290 TraceCheckUtils]: 40: Hoare triple {6116#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~8#1); {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,305 INFO L290 TraceCheckUtils]: 41: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,306 INFO L290 TraceCheckUtils]: 42: Hoare triple {6116#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,306 INFO L290 TraceCheckUtils]: 43: Hoare triple {6116#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,306 INFO L290 TraceCheckUtils]: 44: Hoare triple {6116#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,307 INFO L290 TraceCheckUtils]: 45: Hoare triple {6116#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,307 INFO L290 TraceCheckUtils]: 46: Hoare triple {6116#(= ~pumpRunning~0 0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,307 INFO L290 TraceCheckUtils]: 47: Hoare triple {6116#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,308 INFO L290 TraceCheckUtils]: 48: Hoare triple {6116#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,308 INFO L290 TraceCheckUtils]: 49: Hoare triple {6116#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,308 INFO L272 TraceCheckUtils]: 50: Hoare triple {6116#(= ~pumpRunning~0 0)} call timeShift(); {6116#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 51: Hoare triple {6116#(= ~pumpRunning~0 0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {6115#false} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 52: Hoare triple {6115#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {6115#false} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 53: Hoare triple {6115#false} assume { :end_inline_lowerWaterLevel } true; {6115#false} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 54: Hoare triple {6115#false} assume !(0 != ~systemActive~0); {6115#false} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 55: Hoare triple {6115#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {6115#false} is VALID [2022-02-20 18:11:32,309 INFO L290 TraceCheckUtils]: 56: Hoare triple {6115#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {6115#false} is VALID [2022-02-20 18:11:32,310 INFO L290 TraceCheckUtils]: 57: Hoare triple {6115#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {6115#false} is VALID [2022-02-20 18:11:32,310 INFO L290 TraceCheckUtils]: 58: Hoare triple {6115#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {6115#false} is VALID [2022-02-20 18:11:32,310 INFO L290 TraceCheckUtils]: 59: Hoare triple {6115#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {6115#false} is VALID [2022-02-20 18:11:32,310 INFO L290 TraceCheckUtils]: 60: Hoare triple {6115#false} assume !false; {6115#false} is VALID [2022-02-20 18:11:32,310 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:32,310 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:32,311 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105537544] [2022-02-20 18:11:32,311 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105537544] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:32,311 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:32,311 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:32,311 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1166078168] [2022-02-20 18:11:32,311 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:32,312 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-02-20 18:11:32,312 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:32,312 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,343 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:32,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:32,344 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:32,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:32,345 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:32,345 INFO L87 Difference]: Start difference. First operand 461 states and 636 transitions. Second operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,554 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:32,555 INFO L93 Difference]: Finished difference Result 1051 states and 1497 transitions. [2022-02-20 18:11:32,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:32,555 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-02-20 18:11:32,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:32,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 390 transitions. [2022-02-20 18:11:32,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 390 transitions. [2022-02-20 18:11:32,563 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 390 transitions. [2022-02-20 18:11:32,805 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 390 edges. 390 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:32,826 INFO L225 Difference]: With dead ends: 1051 [2022-02-20 18:11:32,826 INFO L226 Difference]: Without dead ends: 612 [2022-02-20 18:11:32,828 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:32,829 INFO L933 BasicCegarLoop]: 168 mSDtfsCounter, 100 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 100 SdHoareTripleChecker+Valid, 264 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:32,829 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [100 Valid, 264 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:32,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 612 states. [2022-02-20 18:11:32,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 612 to 601. [2022-02-20 18:11:32,853 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:32,855 INFO L82 GeneralOperation]: Start isEquivalent. First operand 612 states. Second operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) [2022-02-20 18:11:32,856 INFO L74 IsIncluded]: Start isIncluded. First operand 612 states. Second operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) [2022-02-20 18:11:32,857 INFO L87 Difference]: Start difference. First operand 612 states. Second operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) [2022-02-20 18:11:32,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:32,875 INFO L93 Difference]: Finished difference Result 612 states and 827 transitions. [2022-02-20 18:11:32,875 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 827 transitions. [2022-02-20 18:11:32,877 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:32,877 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:32,879 INFO L74 IsIncluded]: Start isIncluded. First operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) Second operand 612 states. [2022-02-20 18:11:32,880 INFO L87 Difference]: Start difference. First operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) Second operand 612 states. [2022-02-20 18:11:32,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:32,899 INFO L93 Difference]: Finished difference Result 612 states and 827 transitions. [2022-02-20 18:11:32,899 INFO L276 IsEmpty]: Start isEmpty. Operand 612 states and 827 transitions. [2022-02-20 18:11:32,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:32,901 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:32,901 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:32,901 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:32,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 601 states, 446 states have (on average 1.3228699551569507) internal successors, (590), 497 states have internal predecessors, (590), 93 states have call successors, (93), 62 states have call predecessors, (93), 61 states have return successors, (133), 91 states have call predecessors, (133), 93 states have call successors, (133) [2022-02-20 18:11:32,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 601 states to 601 states and 816 transitions. [2022-02-20 18:11:32,925 INFO L78 Accepts]: Start accepts. Automaton has 601 states and 816 transitions. Word has length 61 [2022-02-20 18:11:32,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:32,926 INFO L470 AbstractCegarLoop]: Abstraction has 601 states and 816 transitions. [2022-02-20 18:11:32,926 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 3 states have internal predecessors, (38), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:32,926 INFO L276 IsEmpty]: Start isEmpty. Operand 601 states and 816 transitions. [2022-02-20 18:11:32,927 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-20 18:11:32,927 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:32,927 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:32,927 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:11:32,927 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:32,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:32,928 INFO L85 PathProgramCache]: Analyzing trace with hash 2086802471, now seen corresponding path program 1 times [2022-02-20 18:11:32,928 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:32,928 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [557735901] [2022-02-20 18:11:32,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:32,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:32,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:32,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,981 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:32,982 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:32,982 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #351#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:32,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,986 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:32,986 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:32,987 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #353#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:32,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:32,991 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:32,991 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #355#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:32,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,995 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:32,996 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:32,996 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #357#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:32,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:32,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:32,999 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:32,999 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,000 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #359#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:33,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:33,003 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,003 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,004 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #361#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:33,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:33,010 INFO L290 TraceCheckUtils]: 0: Hoare triple {9777#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9751#true} is VALID [2022-02-20 18:11:33,010 INFO L290 TraceCheckUtils]: 1: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,010 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #363#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,011 INFO L290 TraceCheckUtils]: 0: Hoare triple {9751#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,011 INFO L290 TraceCheckUtils]: 1: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,011 INFO L290 TraceCheckUtils]: 2: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,011 INFO L272 TraceCheckUtils]: 3: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret55#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,012 INFO L290 TraceCheckUtils]: 4: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,012 INFO L290 TraceCheckUtils]: 5: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,012 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #351#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,012 INFO L290 TraceCheckUtils]: 7: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,013 INFO L272 TraceCheckUtils]: 8: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret56#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,013 INFO L290 TraceCheckUtils]: 9: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,013 INFO L290 TraceCheckUtils]: 10: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,013 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #353#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,014 INFO L290 TraceCheckUtils]: 12: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,014 INFO L272 TraceCheckUtils]: 13: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret57#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,014 INFO L290 TraceCheckUtils]: 14: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,014 INFO L290 TraceCheckUtils]: 15: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,015 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #355#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,015 INFO L290 TraceCheckUtils]: 17: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,015 INFO L272 TraceCheckUtils]: 18: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret58#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,015 INFO L290 TraceCheckUtils]: 19: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,015 INFO L290 TraceCheckUtils]: 20: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,016 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #357#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,016 INFO L290 TraceCheckUtils]: 22: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,016 INFO L272 TraceCheckUtils]: 23: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret59#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,016 INFO L290 TraceCheckUtils]: 24: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,016 INFO L290 TraceCheckUtils]: 25: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,017 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #359#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,017 INFO L290 TraceCheckUtils]: 27: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,017 INFO L272 TraceCheckUtils]: 28: Hoare triple {9753#(= ~pumpRunning~0 0)} call select_features_#t~ret60#1 := select_one(); {9751#true} is VALID [2022-02-20 18:11:33,017 INFO L290 TraceCheckUtils]: 29: Hoare triple {9751#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9751#true} is VALID [2022-02-20 18:11:33,018 INFO L290 TraceCheckUtils]: 30: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,018 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #361#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,018 INFO L290 TraceCheckUtils]: 32: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,019 INFO L290 TraceCheckUtils]: 33: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,019 INFO L290 TraceCheckUtils]: 34: Hoare triple {9753#(= ~pumpRunning~0 0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,019 INFO L290 TraceCheckUtils]: 35: Hoare triple {9753#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,020 INFO L290 TraceCheckUtils]: 36: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,020 INFO L290 TraceCheckUtils]: 37: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !false; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,020 INFO L290 TraceCheckUtils]: 38: Hoare triple {9753#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,020 INFO L290 TraceCheckUtils]: 39: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,021 INFO L290 TraceCheckUtils]: 40: Hoare triple {9753#(= ~pumpRunning~0 0)} assume 0 != test_~tmp~8#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,021 INFO L272 TraceCheckUtils]: 41: Hoare triple {9753#(= ~pumpRunning~0 0)} call waterRise(); {9777#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:33,021 INFO L290 TraceCheckUtils]: 42: Hoare triple {9777#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9751#true} is VALID [2022-02-20 18:11:33,021 INFO L290 TraceCheckUtils]: 43: Hoare triple {9751#true} assume true; {9751#true} is VALID [2022-02-20 18:11:33,022 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {9751#true} {9753#(= ~pumpRunning~0 0)} #363#return; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,037 INFO L290 TraceCheckUtils]: 45: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,038 INFO L290 TraceCheckUtils]: 46: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~3#1); {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,038 INFO L290 TraceCheckUtils]: 47: Hoare triple {9753#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,038 INFO L290 TraceCheckUtils]: 48: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,039 INFO L290 TraceCheckUtils]: 49: Hoare triple {9753#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,039 INFO L290 TraceCheckUtils]: 50: Hoare triple {9753#(= ~pumpRunning~0 0)} assume 0 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,039 INFO L290 TraceCheckUtils]: 51: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,039 INFO L290 TraceCheckUtils]: 52: Hoare triple {9753#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,040 INFO L290 TraceCheckUtils]: 53: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,040 INFO L272 TraceCheckUtils]: 54: Hoare triple {9753#(= ~pumpRunning~0 0)} call timeShift(); {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,040 INFO L290 TraceCheckUtils]: 55: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,041 INFO L290 TraceCheckUtils]: 56: Hoare triple {9753#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,041 INFO L290 TraceCheckUtils]: 57: Hoare triple {9753#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,041 INFO L290 TraceCheckUtils]: 58: Hoare triple {9753#(= ~pumpRunning~0 0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {9753#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:33,042 INFO L290 TraceCheckUtils]: 59: Hoare triple {9753#(= ~pumpRunning~0 0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {9775#(= |timeShift_isPumpRunning_#res#1| 0)} is VALID [2022-02-20 18:11:33,042 INFO L290 TraceCheckUtils]: 60: Hoare triple {9775#(= |timeShift_isPumpRunning_#res#1| 0)} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {9776#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:33,042 INFO L290 TraceCheckUtils]: 61: Hoare triple {9776#(= |timeShift___utac_acc__Specification4_spec__1_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9752#false} is VALID [2022-02-20 18:11:33,043 INFO L290 TraceCheckUtils]: 62: Hoare triple {9752#false} assume !false; {9752#false} is VALID [2022-02-20 18:11:33,043 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:33,043 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:33,043 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [557735901] [2022-02-20 18:11:33,043 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [557735901] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:33,043 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:33,044 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:33,044 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555841832] [2022-02-20 18:11:33,044 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:33,044 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:11:33,045 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:33,045 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:33,078 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:33,078 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:33,078 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:33,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:33,079 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:33,079 INFO L87 Difference]: Start difference. First operand 601 states and 816 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:33,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:33,816 INFO L93 Difference]: Finished difference Result 704 states and 957 transitions. [2022-02-20 18:11:33,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:11:33,816 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:11:33,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:33,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:33,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 307 transitions. [2022-02-20 18:11:33,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:33,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 307 transitions. [2022-02-20 18:11:33,824 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 307 transitions. [2022-02-20 18:11:34,020 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 307 edges. 307 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:34,048 INFO L225 Difference]: With dead ends: 704 [2022-02-20 18:11:34,048 INFO L226 Difference]: Without dead ends: 702 [2022-02-20 18:11:34,049 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:34,051 INFO L933 BasicCegarLoop]: 163 mSDtfsCounter, 203 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:34,054 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [213 Valid, 466 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:34,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702 states. [2022-02-20 18:11:34,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702 to 673. [2022-02-20 18:11:34,084 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:34,086 INFO L82 GeneralOperation]: Start isEquivalent. First operand 702 states. Second operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) [2022-02-20 18:11:34,087 INFO L74 IsIncluded]: Start isIncluded. First operand 702 states. Second operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) [2022-02-20 18:11:34,089 INFO L87 Difference]: Start difference. First operand 702 states. Second operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) [2022-02-20 18:11:34,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:34,111 INFO L93 Difference]: Finished difference Result 702 states and 951 transitions. [2022-02-20 18:11:34,111 INFO L276 IsEmpty]: Start isEmpty. Operand 702 states and 951 transitions. [2022-02-20 18:11:34,114 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:34,114 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:34,115 INFO L74 IsIncluded]: Start isIncluded. First operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) Second operand 702 states. [2022-02-20 18:11:34,117 INFO L87 Difference]: Start difference. First operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) Second operand 702 states. [2022-02-20 18:11:34,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:34,141 INFO L93 Difference]: Finished difference Result 702 states and 951 transitions. [2022-02-20 18:11:34,142 INFO L276 IsEmpty]: Start isEmpty. Operand 702 states and 951 transitions. [2022-02-20 18:11:34,143 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:34,144 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:34,144 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:34,144 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:34,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 673 states, 499 states have (on average 1.3066132264529058) internal successors, (652), 563 states have internal predecessors, (652), 103 states have call successors, (103), 62 states have call predecessors, (103), 70 states have return successors, (158), 101 states have call predecessors, (158), 103 states have call successors, (158) [2022-02-20 18:11:34,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 673 states to 673 states and 913 transitions. [2022-02-20 18:11:34,175 INFO L78 Accepts]: Start accepts. Automaton has 673 states and 913 transitions. Word has length 63 [2022-02-20 18:11:34,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:34,175 INFO L470 AbstractCegarLoop]: Abstraction has 673 states and 913 transitions. [2022-02-20 18:11:34,175 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (8), 3 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:34,176 INFO L276 IsEmpty]: Start isEmpty. Operand 673 states and 913 transitions. [2022-02-20 18:11:34,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:11:34,177 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:34,177 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:34,177 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:11:34,177 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:34,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:34,178 INFO L85 PathProgramCache]: Analyzing trace with hash 1217972023, now seen corresponding path program 1 times [2022-02-20 18:11:34,178 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:34,178 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [666186042] [2022-02-20 18:11:34,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:34,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:34,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:34,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,238 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,239 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,239 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #351#return; {13183#true} is VALID [2022-02-20 18:11:34,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:34,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,246 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,246 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,246 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #353#return; {13183#true} is VALID [2022-02-20 18:11:34,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:34,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,250 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,250 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,250 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #355#return; {13183#true} is VALID [2022-02-20 18:11:34,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:34,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,254 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,254 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,254 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #357#return; {13183#true} is VALID [2022-02-20 18:11:34,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:34,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,257 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,257 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,257 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #359#return; {13183#true} is VALID [2022-02-20 18:11:34,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:34,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,259 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,260 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,260 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #361#return; {13183#true} is VALID [2022-02-20 18:11:34,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:34,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,264 INFO L290 TraceCheckUtils]: 0: Hoare triple {13227#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13183#true} is VALID [2022-02-20 18:11:34,264 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,264 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13183#true} #363#return; {13183#true} is VALID [2022-02-20 18:11:34,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:11:34,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:34,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:11:34,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:34,315 INFO L290 TraceCheckUtils]: 0: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,315 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,315 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {13183#true} {13184#false} #329#return; {13184#false} is VALID [2022-02-20 18:11:34,315 INFO L290 TraceCheckUtils]: 0: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {13183#true} is VALID [2022-02-20 18:11:34,315 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,316 INFO L290 TraceCheckUtils]: 2: Hoare triple {13183#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,316 INFO L290 TraceCheckUtils]: 3: Hoare triple {13183#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {13183#true} is VALID [2022-02-20 18:11:34,317 INFO L290 TraceCheckUtils]: 4: Hoare triple {13183#true} assume 0 != isHighWaterLevel_~tmp~6#1;isHighWaterLevel_~tmp___0~1#1 := 0; {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:34,317 INFO L290 TraceCheckUtils]: 5: Hoare triple {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:34,317 INFO L290 TraceCheckUtils]: 6: Hoare triple {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:11:34,318 INFO L290 TraceCheckUtils]: 7: Hoare triple {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,318 INFO L290 TraceCheckUtils]: 8: Hoare triple {13184#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {13184#false} is VALID [2022-02-20 18:11:34,318 INFO L272 TraceCheckUtils]: 9: Hoare triple {13184#false} call activatePump__before__methaneQuery(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,318 INFO L290 TraceCheckUtils]: 10: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,318 INFO L290 TraceCheckUtils]: 11: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,319 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {13183#true} {13184#false} #329#return; {13184#false} is VALID [2022-02-20 18:11:34,319 INFO L290 TraceCheckUtils]: 13: Hoare triple {13184#false} assume { :end_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,319 INFO L290 TraceCheckUtils]: 14: Hoare triple {13184#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {13184#false} is VALID [2022-02-20 18:11:34,319 INFO L290 TraceCheckUtils]: 15: Hoare triple {13184#false} assume true; {13184#false} is VALID [2022-02-20 18:11:34,319 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {13184#false} {13183#true} #379#return; {13184#false} is VALID [2022-02-20 18:11:34,319 INFO L290 TraceCheckUtils]: 0: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {13183#true} is VALID [2022-02-20 18:11:34,320 INFO L272 TraceCheckUtils]: 1: Hoare triple {13183#true} call processEnvironment__before__lowWaterSensor(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,320 INFO L290 TraceCheckUtils]: 2: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {13183#true} is VALID [2022-02-20 18:11:34,320 INFO L290 TraceCheckUtils]: 3: Hoare triple {13183#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,320 INFO L290 TraceCheckUtils]: 4: Hoare triple {13183#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,320 INFO L290 TraceCheckUtils]: 5: Hoare triple {13183#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {13183#true} is VALID [2022-02-20 18:11:34,321 INFO L290 TraceCheckUtils]: 6: Hoare triple {13183#true} assume 0 != isHighWaterLevel_~tmp~6#1;isHighWaterLevel_~tmp___0~1#1 := 0; {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:34,321 INFO L290 TraceCheckUtils]: 7: Hoare triple {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:34,321 INFO L290 TraceCheckUtils]: 8: Hoare triple {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:11:34,322 INFO L290 TraceCheckUtils]: 9: Hoare triple {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,322 INFO L290 TraceCheckUtils]: 10: Hoare triple {13184#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {13184#false} is VALID [2022-02-20 18:11:34,322 INFO L272 TraceCheckUtils]: 11: Hoare triple {13184#false} call activatePump__before__methaneQuery(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,322 INFO L290 TraceCheckUtils]: 12: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,322 INFO L290 TraceCheckUtils]: 13: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,322 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {13183#true} {13184#false} #329#return; {13184#false} is VALID [2022-02-20 18:11:34,322 INFO L290 TraceCheckUtils]: 15: Hoare triple {13184#false} assume { :end_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,323 INFO L290 TraceCheckUtils]: 16: Hoare triple {13184#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {13184#false} is VALID [2022-02-20 18:11:34,323 INFO L290 TraceCheckUtils]: 17: Hoare triple {13184#false} assume true; {13184#false} is VALID [2022-02-20 18:11:34,328 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {13184#false} {13183#true} #379#return; {13184#false} is VALID [2022-02-20 18:11:34,329 INFO L290 TraceCheckUtils]: 19: Hoare triple {13184#false} assume true; {13184#false} is VALID [2022-02-20 18:11:34,329 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {13184#false} {13183#true} #345#return; {13184#false} is VALID [2022-02-20 18:11:34,329 INFO L290 TraceCheckUtils]: 0: Hoare triple {13183#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {13183#true} is VALID [2022-02-20 18:11:34,329 INFO L290 TraceCheckUtils]: 1: Hoare triple {13183#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,329 INFO L290 TraceCheckUtils]: 2: Hoare triple {13183#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,329 INFO L272 TraceCheckUtils]: 3: Hoare triple {13183#true} call select_features_#t~ret55#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,330 INFO L290 TraceCheckUtils]: 4: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,330 INFO L290 TraceCheckUtils]: 5: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,330 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {13183#true} {13183#true} #351#return; {13183#true} is VALID [2022-02-20 18:11:34,330 INFO L290 TraceCheckUtils]: 7: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L272 TraceCheckUtils]: 8: Hoare triple {13183#true} call select_features_#t~ret56#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L290 TraceCheckUtils]: 9: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L290 TraceCheckUtils]: 10: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {13183#true} {13183#true} #353#return; {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L290 TraceCheckUtils]: 12: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {13183#true} is VALID [2022-02-20 18:11:34,331 INFO L272 TraceCheckUtils]: 13: Hoare triple {13183#true} call select_features_#t~ret57#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L290 TraceCheckUtils]: 14: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L290 TraceCheckUtils]: 15: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {13183#true} {13183#true} #355#return; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L290 TraceCheckUtils]: 17: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L272 TraceCheckUtils]: 18: Hoare triple {13183#true} call select_features_#t~ret58#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L290 TraceCheckUtils]: 19: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L290 TraceCheckUtils]: 20: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,332 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {13183#true} {13183#true} #357#return; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 22: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L272 TraceCheckUtils]: 23: Hoare triple {13183#true} call select_features_#t~ret59#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 24: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 25: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {13183#true} {13183#true} #359#return; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 27: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L272 TraceCheckUtils]: 28: Hoare triple {13183#true} call select_features_#t~ret60#1 := select_one(); {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 29: Hoare triple {13183#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {13183#true} is VALID [2022-02-20 18:11:34,333 INFO L290 TraceCheckUtils]: 30: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {13183#true} {13183#true} #361#return; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 32: Hoare triple {13183#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 33: Hoare triple {13183#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 34: Hoare triple {13183#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 35: Hoare triple {13183#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 36: Hoare triple {13183#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 37: Hoare triple {13183#true} assume !false; {13183#true} is VALID [2022-02-20 18:11:34,334 INFO L290 TraceCheckUtils]: 38: Hoare triple {13183#true} assume test_~splverifierCounter~0#1 < 4; {13183#true} is VALID [2022-02-20 18:11:34,335 INFO L290 TraceCheckUtils]: 39: Hoare triple {13183#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {13183#true} is VALID [2022-02-20 18:11:34,335 INFO L290 TraceCheckUtils]: 40: Hoare triple {13183#true} assume 0 != test_~tmp~8#1; {13183#true} is VALID [2022-02-20 18:11:34,335 INFO L272 TraceCheckUtils]: 41: Hoare triple {13183#true} call waterRise(); {13227#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:34,335 INFO L290 TraceCheckUtils]: 42: Hoare triple {13227#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13183#true} is VALID [2022-02-20 18:11:34,335 INFO L290 TraceCheckUtils]: 43: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {13183#true} {13183#true} #363#return; {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 45: Hoare triple {13183#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 46: Hoare triple {13183#true} assume !(0 != test_~tmp___0~3#1); {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 47: Hoare triple {13183#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 48: Hoare triple {13183#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 49: Hoare triple {13183#true} assume !(0 != test_~tmp___1~0#1); {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L272 TraceCheckUtils]: 50: Hoare triple {13183#true} call timeShift(); {13183#true} is VALID [2022-02-20 18:11:34,336 INFO L290 TraceCheckUtils]: 51: Hoare triple {13183#true} assume !(0 != ~pumpRunning~0); {13183#true} is VALID [2022-02-20 18:11:34,337 INFO L290 TraceCheckUtils]: 52: Hoare triple {13183#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {13183#true} is VALID [2022-02-20 18:11:34,337 INFO L290 TraceCheckUtils]: 53: Hoare triple {13183#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {13183#true} is VALID [2022-02-20 18:11:34,337 INFO L272 TraceCheckUtils]: 54: Hoare triple {13183#true} call processEnvironment__before__methaneAlarm(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,337 INFO L290 TraceCheckUtils]: 55: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {13183#true} is VALID [2022-02-20 18:11:34,338 INFO L272 TraceCheckUtils]: 56: Hoare triple {13183#true} call processEnvironment__before__lowWaterSensor(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,338 INFO L290 TraceCheckUtils]: 57: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {13183#true} is VALID [2022-02-20 18:11:34,338 INFO L290 TraceCheckUtils]: 58: Hoare triple {13183#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,338 INFO L290 TraceCheckUtils]: 59: Hoare triple {13183#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {13183#true} is VALID [2022-02-20 18:11:34,338 INFO L290 TraceCheckUtils]: 60: Hoare triple {13183#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {13183#true} is VALID [2022-02-20 18:11:34,338 INFO L290 TraceCheckUtils]: 61: Hoare triple {13183#true} assume 0 != isHighWaterLevel_~tmp~6#1;isHighWaterLevel_~tmp___0~1#1 := 0; {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:11:34,339 INFO L290 TraceCheckUtils]: 62: Hoare triple {13246#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:34,339 INFO L290 TraceCheckUtils]: 63: Hoare triple {13247#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| 0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:11:34,339 INFO L290 TraceCheckUtils]: 64: Hoare triple {13248#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| 0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,339 INFO L290 TraceCheckUtils]: 65: Hoare triple {13184#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {13184#false} is VALID [2022-02-20 18:11:34,340 INFO L272 TraceCheckUtils]: 66: Hoare triple {13184#false} call activatePump__before__methaneQuery(); {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:34,360 INFO L290 TraceCheckUtils]: 67: Hoare triple {13228#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {13183#true} is VALID [2022-02-20 18:11:34,360 INFO L290 TraceCheckUtils]: 68: Hoare triple {13183#true} assume true; {13183#true} is VALID [2022-02-20 18:11:34,360 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {13183#true} {13184#false} #329#return; {13184#false} is VALID [2022-02-20 18:11:34,360 INFO L290 TraceCheckUtils]: 70: Hoare triple {13184#false} assume { :end_inline_activatePump } true; {13184#false} is VALID [2022-02-20 18:11:34,360 INFO L290 TraceCheckUtils]: 71: Hoare triple {13184#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 72: Hoare triple {13184#false} assume true; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {13184#false} {13183#true} #379#return; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 74: Hoare triple {13184#false} assume true; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {13184#false} {13183#true} #345#return; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 76: Hoare triple {13184#false} assume { :end_inline_processEnvironment } true; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 77: Hoare triple {13184#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 78: Hoare triple {13184#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {13184#false} is VALID [2022-02-20 18:11:34,361 INFO L290 TraceCheckUtils]: 79: Hoare triple {13184#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {13184#false} is VALID [2022-02-20 18:11:34,362 INFO L290 TraceCheckUtils]: 80: Hoare triple {13184#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {13184#false} is VALID [2022-02-20 18:11:34,362 INFO L290 TraceCheckUtils]: 81: Hoare triple {13184#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {13184#false} is VALID [2022-02-20 18:11:34,362 INFO L290 TraceCheckUtils]: 82: Hoare triple {13184#false} assume !false; {13184#false} is VALID [2022-02-20 18:11:34,362 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:34,362 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:34,362 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [666186042] [2022-02-20 18:11:34,363 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [666186042] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:34,363 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:34,363 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:34,363 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919343472] [2022-02-20 18:11:34,363 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:34,364 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:34,364 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:34,364 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:34,402 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:34,402 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:34,403 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:34,403 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:34,403 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:34,403 INFO L87 Difference]: Start difference. First operand 673 states and 913 transitions. Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:35,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:35,334 INFO L93 Difference]: Finished difference Result 1468 states and 2082 transitions. [2022-02-20 18:11:35,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-20 18:11:35,335 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:35,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:35,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:35,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 398 transitions. [2022-02-20 18:11:35,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:35,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 398 transitions. [2022-02-20 18:11:35,343 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 398 transitions. [2022-02-20 18:11:35,585 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 398 edges. 398 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:35,621 INFO L225 Difference]: With dead ends: 1468 [2022-02-20 18:11:35,621 INFO L226 Difference]: Without dead ends: 817 [2022-02-20 18:11:35,623 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-02-20 18:11:35,624 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 192 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 438 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 534 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 438 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:35,624 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [193 Valid, 483 Invalid, 534 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 438 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:35,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 817 states. [2022-02-20 18:11:35,651 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 817 to 743. [2022-02-20 18:11:35,651 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:35,653 INFO L82 GeneralOperation]: Start isEquivalent. First operand 817 states. Second operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) [2022-02-20 18:11:35,655 INFO L74 IsIncluded]: Start isIncluded. First operand 817 states. Second operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) [2022-02-20 18:11:35,656 INFO L87 Difference]: Start difference. First operand 817 states. Second operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) [2022-02-20 18:11:35,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:35,687 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2022-02-20 18:11:35,687 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1104 transitions. [2022-02-20 18:11:35,689 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:35,689 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:35,691 INFO L74 IsIncluded]: Start isIncluded. First operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) Second operand 817 states. [2022-02-20 18:11:35,693 INFO L87 Difference]: Start difference. First operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) Second operand 817 states. [2022-02-20 18:11:35,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:35,735 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2022-02-20 18:11:35,736 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 1104 transitions. [2022-02-20 18:11:35,738 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:35,738 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:35,738 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:35,738 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:35,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 743 states, 559 states have (on average 1.2844364937388193) internal successors, (718), 623 states have internal predecessors, (718), 103 states have call successors, (103), 62 states have call predecessors, (103), 80 states have return successors, (182), 115 states have call predecessors, (182), 103 states have call successors, (182) [2022-02-20 18:11:35,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 743 states to 743 states and 1003 transitions. [2022-02-20 18:11:35,771 INFO L78 Accepts]: Start accepts. Automaton has 743 states and 1003 transitions. Word has length 83 [2022-02-20 18:11:35,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:35,772 INFO L470 AbstractCegarLoop]: Abstraction has 743 states and 1003 transitions. [2022-02-20 18:11:35,772 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:35,772 INFO L276 IsEmpty]: Start isEmpty. Operand 743 states and 1003 transitions. [2022-02-20 18:11:35,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:11:35,773 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:35,774 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:35,774 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:11:35,774 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:35,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:35,774 INFO L85 PathProgramCache]: Analyzing trace with hash 1436826741, now seen corresponding path program 1 times [2022-02-20 18:11:35,775 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:35,775 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [778514759] [2022-02-20 18:11:35,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:35,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:35,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:35,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,809 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,809 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,809 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #351#return; {18091#true} is VALID [2022-02-20 18:11:35,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:35,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,812 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,812 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,812 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #353#return; {18091#true} is VALID [2022-02-20 18:11:35,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:35,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,816 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,816 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,816 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #355#return; {18091#true} is VALID [2022-02-20 18:11:35,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:35,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,819 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,820 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,820 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #357#return; {18091#true} is VALID [2022-02-20 18:11:35,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:35,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,823 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,823 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,824 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #359#return; {18091#true} is VALID [2022-02-20 18:11:35,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:35,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,830 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,830 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,831 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #361#return; {18091#true} is VALID [2022-02-20 18:11:35,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:35,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {18135#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18091#true} is VALID [2022-02-20 18:11:35,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18091#true} #363#return; {18091#true} is VALID [2022-02-20 18:11:35,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:11:35,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:35,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:11:35,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:35,863 INFO L290 TraceCheckUtils]: 0: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,863 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,863 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {18091#true} {18092#false} #329#return; {18092#false} is VALID [2022-02-20 18:11:35,863 INFO L290 TraceCheckUtils]: 0: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {18091#true} is VALID [2022-02-20 18:11:35,863 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {18091#true} is VALID [2022-02-20 18:11:35,864 INFO L290 TraceCheckUtils]: 2: Hoare triple {18091#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:35,864 INFO L290 TraceCheckUtils]: 3: Hoare triple {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} is VALID [2022-02-20 18:11:35,864 INFO L290 TraceCheckUtils]: 4: Hoare triple {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18092#false} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 5: Hoare triple {18092#false} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {18092#false} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 6: Hoare triple {18092#false} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {18092#false} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 7: Hoare triple {18092#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 8: Hoare triple {18092#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18092#false} is VALID [2022-02-20 18:11:35,865 INFO L272 TraceCheckUtils]: 9: Hoare triple {18092#false} call activatePump__before__methaneQuery(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 10: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,865 INFO L290 TraceCheckUtils]: 11: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,865 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {18091#true} {18092#false} #329#return; {18092#false} is VALID [2022-02-20 18:11:35,866 INFO L290 TraceCheckUtils]: 13: Hoare triple {18092#false} assume { :end_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,866 INFO L290 TraceCheckUtils]: 14: Hoare triple {18092#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18092#false} is VALID [2022-02-20 18:11:35,866 INFO L290 TraceCheckUtils]: 15: Hoare triple {18092#false} assume true; {18092#false} is VALID [2022-02-20 18:11:35,866 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18092#false} {18091#true} #379#return; {18092#false} is VALID [2022-02-20 18:11:35,866 INFO L290 TraceCheckUtils]: 0: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {18091#true} is VALID [2022-02-20 18:11:35,868 INFO L272 TraceCheckUtils]: 1: Hoare triple {18091#true} call processEnvironment__before__lowWaterSensor(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,868 INFO L290 TraceCheckUtils]: 2: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {18091#true} is VALID [2022-02-20 18:11:35,868 INFO L290 TraceCheckUtils]: 3: Hoare triple {18091#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {18091#true} is VALID [2022-02-20 18:11:35,868 INFO L290 TraceCheckUtils]: 4: Hoare triple {18091#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 5: Hoare triple {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 6: Hoare triple {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18092#false} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 7: Hoare triple {18092#false} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {18092#false} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 8: Hoare triple {18092#false} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {18092#false} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 9: Hoare triple {18092#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,869 INFO L290 TraceCheckUtils]: 10: Hoare triple {18092#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L272 TraceCheckUtils]: 11: Hoare triple {18092#false} call activatePump__before__methaneQuery(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 12: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 13: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,870 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {18091#true} {18092#false} #329#return; {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 15: Hoare triple {18092#false} assume { :end_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 16: Hoare triple {18092#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 17: Hoare triple {18092#false} assume true; {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {18092#false} {18091#true} #379#return; {18092#false} is VALID [2022-02-20 18:11:35,870 INFO L290 TraceCheckUtils]: 19: Hoare triple {18092#false} assume true; {18092#false} is VALID [2022-02-20 18:11:35,871 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {18092#false} {18091#true} #345#return; {18092#false} is VALID [2022-02-20 18:11:35,871 INFO L290 TraceCheckUtils]: 0: Hoare triple {18091#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {18091#true} is VALID [2022-02-20 18:11:35,871 INFO L290 TraceCheckUtils]: 1: Hoare triple {18091#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,871 INFO L290 TraceCheckUtils]: 2: Hoare triple {18091#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,871 INFO L272 TraceCheckUtils]: 3: Hoare triple {18091#true} call select_features_#t~ret55#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,871 INFO L290 TraceCheckUtils]: 4: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,871 INFO L290 TraceCheckUtils]: 5: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {18091#true} {18091#true} #351#return; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L290 TraceCheckUtils]: 7: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L272 TraceCheckUtils]: 8: Hoare triple {18091#true} call select_features_#t~ret56#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L290 TraceCheckUtils]: 9: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L290 TraceCheckUtils]: 10: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {18091#true} {18091#true} #353#return; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L290 TraceCheckUtils]: 12: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {18091#true} is VALID [2022-02-20 18:11:35,872 INFO L272 TraceCheckUtils]: 13: Hoare triple {18091#true} call select_features_#t~ret57#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L290 TraceCheckUtils]: 14: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L290 TraceCheckUtils]: 15: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {18091#true} {18091#true} #355#return; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L290 TraceCheckUtils]: 17: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L272 TraceCheckUtils]: 18: Hoare triple {18091#true} call select_features_#t~ret58#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L290 TraceCheckUtils]: 19: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L290 TraceCheckUtils]: 20: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,873 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {18091#true} {18091#true} #357#return; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 22: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L272 TraceCheckUtils]: 23: Hoare triple {18091#true} call select_features_#t~ret59#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 24: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 25: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {18091#true} {18091#true} #359#return; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 27: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L272 TraceCheckUtils]: 28: Hoare triple {18091#true} call select_features_#t~ret60#1 := select_one(); {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 29: Hoare triple {18091#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {18091#true} is VALID [2022-02-20 18:11:35,874 INFO L290 TraceCheckUtils]: 30: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {18091#true} {18091#true} #361#return; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 32: Hoare triple {18091#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 33: Hoare triple {18091#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 34: Hoare triple {18091#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 35: Hoare triple {18091#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 36: Hoare triple {18091#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 37: Hoare triple {18091#true} assume !false; {18091#true} is VALID [2022-02-20 18:11:35,875 INFO L290 TraceCheckUtils]: 38: Hoare triple {18091#true} assume test_~splverifierCounter~0#1 < 4; {18091#true} is VALID [2022-02-20 18:11:35,876 INFO L290 TraceCheckUtils]: 39: Hoare triple {18091#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {18091#true} is VALID [2022-02-20 18:11:35,876 INFO L290 TraceCheckUtils]: 40: Hoare triple {18091#true} assume 0 != test_~tmp~8#1; {18091#true} is VALID [2022-02-20 18:11:35,876 INFO L272 TraceCheckUtils]: 41: Hoare triple {18091#true} call waterRise(); {18135#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:35,876 INFO L290 TraceCheckUtils]: 42: Hoare triple {18135#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18091#true} is VALID [2022-02-20 18:11:35,876 INFO L290 TraceCheckUtils]: 43: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,876 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {18091#true} {18091#true} #363#return; {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 45: Hoare triple {18091#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 46: Hoare triple {18091#true} assume !(0 != test_~tmp___0~3#1); {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 47: Hoare triple {18091#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 48: Hoare triple {18091#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 49: Hoare triple {18091#true} assume !(0 != test_~tmp___1~0#1); {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L272 TraceCheckUtils]: 50: Hoare triple {18091#true} call timeShift(); {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 51: Hoare triple {18091#true} assume !(0 != ~pumpRunning~0); {18091#true} is VALID [2022-02-20 18:11:35,877 INFO L290 TraceCheckUtils]: 52: Hoare triple {18091#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {18091#true} is VALID [2022-02-20 18:11:35,878 INFO L290 TraceCheckUtils]: 53: Hoare triple {18091#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {18091#true} is VALID [2022-02-20 18:11:35,878 INFO L272 TraceCheckUtils]: 54: Hoare triple {18091#true} call processEnvironment__before__methaneAlarm(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,878 INFO L290 TraceCheckUtils]: 55: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {18091#true} is VALID [2022-02-20 18:11:35,878 INFO L272 TraceCheckUtils]: 56: Hoare triple {18091#true} call processEnvironment__before__lowWaterSensor(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,878 INFO L290 TraceCheckUtils]: 57: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {18091#true} is VALID [2022-02-20 18:11:35,879 INFO L290 TraceCheckUtils]: 58: Hoare triple {18091#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {18091#true} is VALID [2022-02-20 18:11:35,887 INFO L290 TraceCheckUtils]: 59: Hoare triple {18091#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~10#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:11:35,888 INFO L290 TraceCheckUtils]: 60: Hoare triple {18154#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} is VALID [2022-02-20 18:11:35,888 INFO L290 TraceCheckUtils]: 61: Hoare triple {18155#(<= 1 |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1|)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {18092#false} is VALID [2022-02-20 18:11:35,888 INFO L290 TraceCheckUtils]: 62: Hoare triple {18092#false} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {18092#false} is VALID [2022-02-20 18:11:35,888 INFO L290 TraceCheckUtils]: 63: Hoare triple {18092#false} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {18092#false} is VALID [2022-02-20 18:11:35,888 INFO L290 TraceCheckUtils]: 64: Hoare triple {18092#false} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,889 INFO L290 TraceCheckUtils]: 65: Hoare triple {18092#false} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {18092#false} is VALID [2022-02-20 18:11:35,889 INFO L272 TraceCheckUtils]: 66: Hoare triple {18092#false} call activatePump__before__methaneQuery(); {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:35,889 INFO L290 TraceCheckUtils]: 67: Hoare triple {18136#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {18091#true} is VALID [2022-02-20 18:11:35,889 INFO L290 TraceCheckUtils]: 68: Hoare triple {18091#true} assume true; {18091#true} is VALID [2022-02-20 18:11:35,889 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {18091#true} {18092#false} #329#return; {18092#false} is VALID [2022-02-20 18:11:35,889 INFO L290 TraceCheckUtils]: 70: Hoare triple {18092#false} assume { :end_inline_activatePump } true; {18092#false} is VALID [2022-02-20 18:11:35,889 INFO L290 TraceCheckUtils]: 71: Hoare triple {18092#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 72: Hoare triple {18092#false} assume true; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {18092#false} {18091#true} #379#return; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 74: Hoare triple {18092#false} assume true; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {18092#false} {18091#true} #345#return; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 76: Hoare triple {18092#false} assume { :end_inline_processEnvironment } true; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 77: Hoare triple {18092#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 78: Hoare triple {18092#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {18092#false} is VALID [2022-02-20 18:11:35,890 INFO L290 TraceCheckUtils]: 79: Hoare triple {18092#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {18092#false} is VALID [2022-02-20 18:11:35,891 INFO L290 TraceCheckUtils]: 80: Hoare triple {18092#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {18092#false} is VALID [2022-02-20 18:11:35,891 INFO L290 TraceCheckUtils]: 81: Hoare triple {18092#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {18092#false} is VALID [2022-02-20 18:11:35,891 INFO L290 TraceCheckUtils]: 82: Hoare triple {18092#false} assume !false; {18092#false} is VALID [2022-02-20 18:11:35,891 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:35,891 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:35,891 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [778514759] [2022-02-20 18:11:35,892 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [778514759] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:35,892 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:35,892 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:35,892 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1634455967] [2022-02-20 18:11:35,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:35,893 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:35,893 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:35,893 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:35,938 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:35,939 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:35,939 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:35,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:35,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:35,940 INFO L87 Difference]: Start difference. First operand 743 states and 1003 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:36,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:36,737 INFO L93 Difference]: Finished difference Result 1418 states and 1988 transitions. [2022-02-20 18:11:36,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:11:36,738 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:36,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:36,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:36,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 395 transitions. [2022-02-20 18:11:36,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:36,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 395 transitions. [2022-02-20 18:11:36,745 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 395 transitions. [2022-02-20 18:11:36,966 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 395 edges. 395 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:36,991 INFO L225 Difference]: With dead ends: 1418 [2022-02-20 18:11:36,991 INFO L226 Difference]: Without dead ends: 697 [2022-02-20 18:11:36,993 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:36,994 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 199 mSDsluCounter, 250 mSDsCounter, 0 mSdLazyCounter, 317 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 410 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 317 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:36,994 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [200 Valid, 395 Invalid, 410 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 317 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-20 18:11:36,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 697 states. [2022-02-20 18:11:37,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 697 to 587. [2022-02-20 18:11:37,027 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:37,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 697 states. Second operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) [2022-02-20 18:11:37,031 INFO L74 IsIncluded]: Start isIncluded. First operand 697 states. Second operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) [2022-02-20 18:11:37,032 INFO L87 Difference]: Start difference. First operand 697 states. Second operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) [2022-02-20 18:11:37,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:37,052 INFO L93 Difference]: Finished difference Result 697 states and 928 transitions. [2022-02-20 18:11:37,053 INFO L276 IsEmpty]: Start isEmpty. Operand 697 states and 928 transitions. [2022-02-20 18:11:37,054 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:37,054 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:37,056 INFO L74 IsIncluded]: Start isIncluded. First operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) Second operand 697 states. [2022-02-20 18:11:37,057 INFO L87 Difference]: Start difference. First operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) Second operand 697 states. [2022-02-20 18:11:37,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:37,109 INFO L93 Difference]: Finished difference Result 697 states and 928 transitions. [2022-02-20 18:11:37,109 INFO L276 IsEmpty]: Start isEmpty. Operand 697 states and 928 transitions. [2022-02-20 18:11:37,111 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:37,111 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:37,111 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:37,111 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:37,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 587 states, 437 states have (on average 1.2929061784897025) internal successors, (565), 490 states have internal predecessors, (565), 88 states have call successors, (88), 51 states have call predecessors, (88), 61 states have return successors, (144), 88 states have call predecessors, (144), 88 states have call successors, (144) [2022-02-20 18:11:37,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 587 states to 587 states and 797 transitions. [2022-02-20 18:11:37,133 INFO L78 Accepts]: Start accepts. Automaton has 587 states and 797 transitions. Word has length 83 [2022-02-20 18:11:37,133 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:37,133 INFO L470 AbstractCegarLoop]: Abstraction has 587 states and 797 transitions. [2022-02-20 18:11:37,133 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:37,133 INFO L276 IsEmpty]: Start isEmpty. Operand 587 states and 797 transitions. [2022-02-20 18:11:37,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:11:37,154 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:37,154 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:37,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:11:37,155 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:37,155 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:37,155 INFO L85 PathProgramCache]: Analyzing trace with hash 1302813235, now seen corresponding path program 1 times [2022-02-20 18:11:37,155 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:37,155 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1538411480] [2022-02-20 18:11:37,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:37,156 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:37,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:37,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,272 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,272 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,272 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #351#return; {22452#true} is VALID [2022-02-20 18:11:37,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:37,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,275 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,276 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,276 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #353#return; {22452#true} is VALID [2022-02-20 18:11:37,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:37,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,279 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,279 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,279 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #355#return; {22452#true} is VALID [2022-02-20 18:11:37,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:37,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,282 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,282 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,283 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #357#return; {22452#true} is VALID [2022-02-20 18:11:37,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:37,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,294 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,294 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,294 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #359#return; {22452#true} is VALID [2022-02-20 18:11:37,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:37,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,298 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,298 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,298 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #361#return; {22452#true} is VALID [2022-02-20 18:11:37,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:37,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,312 INFO L290 TraceCheckUtils]: 0: Hoare triple {22499#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22452#true} is VALID [2022-02-20 18:11:37,313 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,313 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22452#true} #363#return; {22452#true} is VALID [2022-02-20 18:11:37,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-02-20 18:11:37,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:37,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:11:37,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:37,360 INFO L290 TraceCheckUtils]: 0: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,360 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,361 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {22452#true} {22496#(<= 2 ~waterLevel~0)} #329#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,361 INFO L290 TraceCheckUtils]: 0: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {22452#true} is VALID [2022-02-20 18:11:37,361 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {22452#true} is VALID [2022-02-20 18:11:37,361 INFO L290 TraceCheckUtils]: 2: Hoare triple {22452#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,362 INFO L290 TraceCheckUtils]: 3: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,362 INFO L290 TraceCheckUtils]: 4: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,362 INFO L290 TraceCheckUtils]: 5: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,363 INFO L290 TraceCheckUtils]: 6: Hoare triple {22496#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,363 INFO L290 TraceCheckUtils]: 7: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,363 INFO L290 TraceCheckUtils]: 8: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,364 INFO L272 TraceCheckUtils]: 9: Hoare triple {22496#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,364 INFO L290 TraceCheckUtils]: 10: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,364 INFO L290 TraceCheckUtils]: 11: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,364 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {22452#true} {22496#(<= 2 ~waterLevel~0)} #329#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,364 INFO L290 TraceCheckUtils]: 13: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,365 INFO L290 TraceCheckUtils]: 14: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,365 INFO L290 TraceCheckUtils]: 15: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,365 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22496#(<= 2 ~waterLevel~0)} {22452#true} #379#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,365 INFO L290 TraceCheckUtils]: 0: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {22452#true} is VALID [2022-02-20 18:11:37,366 INFO L272 TraceCheckUtils]: 1: Hoare triple {22452#true} call processEnvironment__before__lowWaterSensor(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,366 INFO L290 TraceCheckUtils]: 2: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {22452#true} is VALID [2022-02-20 18:11:37,366 INFO L290 TraceCheckUtils]: 3: Hoare triple {22452#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {22452#true} is VALID [2022-02-20 18:11:37,366 INFO L290 TraceCheckUtils]: 4: Hoare triple {22452#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,366 INFO L290 TraceCheckUtils]: 5: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,367 INFO L290 TraceCheckUtils]: 6: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,367 INFO L290 TraceCheckUtils]: 7: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,367 INFO L290 TraceCheckUtils]: 8: Hoare triple {22496#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,368 INFO L290 TraceCheckUtils]: 9: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,368 INFO L290 TraceCheckUtils]: 10: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,368 INFO L272 TraceCheckUtils]: 11: Hoare triple {22496#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,368 INFO L290 TraceCheckUtils]: 12: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,368 INFO L290 TraceCheckUtils]: 13: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,369 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {22452#true} {22496#(<= 2 ~waterLevel~0)} #329#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,369 INFO L290 TraceCheckUtils]: 15: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,369 INFO L290 TraceCheckUtils]: 16: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,369 INFO L290 TraceCheckUtils]: 17: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,370 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {22496#(<= 2 ~waterLevel~0)} {22452#true} #379#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,370 INFO L290 TraceCheckUtils]: 19: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,370 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {22496#(<= 2 ~waterLevel~0)} {22452#true} #345#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,370 INFO L290 TraceCheckUtils]: 0: Hoare triple {22452#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {22452#true} is VALID [2022-02-20 18:11:37,370 INFO L290 TraceCheckUtils]: 1: Hoare triple {22452#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,371 INFO L290 TraceCheckUtils]: 2: Hoare triple {22452#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,371 INFO L272 TraceCheckUtils]: 3: Hoare triple {22452#true} call select_features_#t~ret55#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 4: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 5: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {22452#true} {22452#true} #351#return; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 7: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L272 TraceCheckUtils]: 8: Hoare triple {22452#true} call select_features_#t~ret56#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 9: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 10: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {22452#true} {22452#true} #353#return; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L290 TraceCheckUtils]: 12: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {22452#true} is VALID [2022-02-20 18:11:37,377 INFO L272 TraceCheckUtils]: 13: Hoare triple {22452#true} call select_features_#t~ret57#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 14: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 15: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {22452#true} {22452#true} #355#return; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 17: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L272 TraceCheckUtils]: 18: Hoare triple {22452#true} call select_features_#t~ret58#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 19: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 20: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {22452#true} {22452#true} #357#return; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 22: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L272 TraceCheckUtils]: 23: Hoare triple {22452#true} call select_features_#t~ret59#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 24: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 25: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {22452#true} {22452#true} #359#return; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 27: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L272 TraceCheckUtils]: 28: Hoare triple {22452#true} call select_features_#t~ret60#1 := select_one(); {22452#true} is VALID [2022-02-20 18:11:37,378 INFO L290 TraceCheckUtils]: 29: Hoare triple {22452#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 30: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {22452#true} {22452#true} #361#return; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 32: Hoare triple {22452#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 33: Hoare triple {22452#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 34: Hoare triple {22452#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 35: Hoare triple {22452#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 36: Hoare triple {22452#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 37: Hoare triple {22452#true} assume !false; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 38: Hoare triple {22452#true} assume test_~splverifierCounter~0#1 < 4; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 39: Hoare triple {22452#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {22452#true} is VALID [2022-02-20 18:11:37,379 INFO L290 TraceCheckUtils]: 40: Hoare triple {22452#true} assume 0 != test_~tmp~8#1; {22452#true} is VALID [2022-02-20 18:11:37,391 INFO L272 TraceCheckUtils]: 41: Hoare triple {22452#true} call waterRise(); {22499#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:37,391 INFO L290 TraceCheckUtils]: 42: Hoare triple {22499#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 43: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {22452#true} {22452#true} #363#return; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 45: Hoare triple {22452#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 46: Hoare triple {22452#true} assume !(0 != test_~tmp___0~3#1); {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 47: Hoare triple {22452#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 48: Hoare triple {22452#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 49: Hoare triple {22452#true} assume !(0 != test_~tmp___1~0#1); {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L272 TraceCheckUtils]: 50: Hoare triple {22452#true} call timeShift(); {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 51: Hoare triple {22452#true} assume !(0 != ~pumpRunning~0); {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 52: Hoare triple {22452#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L290 TraceCheckUtils]: 53: Hoare triple {22452#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {22452#true} is VALID [2022-02-20 18:11:37,392 INFO L272 TraceCheckUtils]: 54: Hoare triple {22452#true} call processEnvironment__before__methaneAlarm(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,393 INFO L290 TraceCheckUtils]: 55: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {22452#true} is VALID [2022-02-20 18:11:37,393 INFO L272 TraceCheckUtils]: 56: Hoare triple {22452#true} call processEnvironment__before__lowWaterSensor(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,393 INFO L290 TraceCheckUtils]: 57: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {22452#true} is VALID [2022-02-20 18:11:37,393 INFO L290 TraceCheckUtils]: 58: Hoare triple {22452#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {22452#true} is VALID [2022-02-20 18:11:37,393 INFO L290 TraceCheckUtils]: 59: Hoare triple {22452#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,394 INFO L290 TraceCheckUtils]: 60: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,394 INFO L290 TraceCheckUtils]: 61: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,394 INFO L290 TraceCheckUtils]: 62: Hoare triple {22496#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,395 INFO L290 TraceCheckUtils]: 63: Hoare triple {22496#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,395 INFO L290 TraceCheckUtils]: 64: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,395 INFO L290 TraceCheckUtils]: 65: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,395 INFO L272 TraceCheckUtils]: 66: Hoare triple {22496#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:37,396 INFO L290 TraceCheckUtils]: 67: Hoare triple {22500#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {22452#true} is VALID [2022-02-20 18:11:37,396 INFO L290 TraceCheckUtils]: 68: Hoare triple {22452#true} assume true; {22452#true} is VALID [2022-02-20 18:11:37,396 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {22452#true} {22496#(<= 2 ~waterLevel~0)} #329#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,396 INFO L290 TraceCheckUtils]: 70: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,397 INFO L290 TraceCheckUtils]: 71: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,397 INFO L290 TraceCheckUtils]: 72: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,397 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {22496#(<= 2 ~waterLevel~0)} {22452#true} #379#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,397 INFO L290 TraceCheckUtils]: 74: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,398 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {22496#(<= 2 ~waterLevel~0)} {22452#true} #345#return; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,398 INFO L290 TraceCheckUtils]: 76: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {22496#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:37,398 INFO L290 TraceCheckUtils]: 77: Hoare triple {22496#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {22497#(<= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:37,399 INFO L290 TraceCheckUtils]: 78: Hoare triple {22497#(<= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {22498#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:37,399 INFO L290 TraceCheckUtils]: 79: Hoare triple {22498#(<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {22453#false} is VALID [2022-02-20 18:11:37,399 INFO L290 TraceCheckUtils]: 80: Hoare triple {22453#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {22453#false} is VALID [2022-02-20 18:11:37,399 INFO L290 TraceCheckUtils]: 81: Hoare triple {22453#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {22453#false} is VALID [2022-02-20 18:11:37,399 INFO L290 TraceCheckUtils]: 82: Hoare triple {22453#false} assume !false; {22453#false} is VALID [2022-02-20 18:11:37,399 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:37,400 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:37,400 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1538411480] [2022-02-20 18:11:37,400 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1538411480] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:37,400 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:37,400 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:37,400 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [592812315] [2022-02-20 18:11:37,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:37,401 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:37,401 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:37,401 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:37,458 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 73 edges. 73 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:37,459 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:11:37,459 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:37,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:11:37,459 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:37,459 INFO L87 Difference]: Start difference. First operand 587 states and 797 transitions. Second operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:39,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:39,574 INFO L93 Difference]: Finished difference Result 1295 states and 1847 transitions. [2022-02-20 18:11:39,574 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-02-20 18:11:39,575 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 83 [2022-02-20 18:11:39,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:39,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:39,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 514 transitions. [2022-02-20 18:11:39,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:39,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 514 transitions. [2022-02-20 18:11:39,616 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 17 states and 514 transitions. [2022-02-20 18:11:39,951 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 514 edges. 514 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:40,005 INFO L225 Difference]: With dead ends: 1295 [2022-02-20 18:11:40,005 INFO L226 Difference]: Without dead ends: 868 [2022-02-20 18:11:40,007 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 42 GetRequests, 23 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-02-20 18:11:40,009 INFO L933 BasicCegarLoop]: 201 mSDtfsCounter, 297 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 543 mSolverCounterSat, 147 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 632 SdHoareTripleChecker+Invalid, 690 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 147 IncrementalHoareTripleChecker+Valid, 543 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:40,009 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [300 Valid, 632 Invalid, 690 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [147 Valid, 543 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-02-20 18:11:40,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 868 states. [2022-02-20 18:11:40,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 868 to 841. [2022-02-20 18:11:40,117 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:40,119 INFO L82 GeneralOperation]: Start isEquivalent. First operand 868 states. Second operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) [2022-02-20 18:11:40,120 INFO L74 IsIncluded]: Start isIncluded. First operand 868 states. Second operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) [2022-02-20 18:11:40,121 INFO L87 Difference]: Start difference. First operand 868 states. Second operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) [2022-02-20 18:11:40,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:40,155 INFO L93 Difference]: Finished difference Result 868 states and 1193 transitions. [2022-02-20 18:11:40,155 INFO L276 IsEmpty]: Start isEmpty. Operand 868 states and 1193 transitions. [2022-02-20 18:11:40,158 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:40,158 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:40,160 INFO L74 IsIncluded]: Start isIncluded. First operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) Second operand 868 states. [2022-02-20 18:11:40,161 INFO L87 Difference]: Start difference. First operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) Second operand 868 states. [2022-02-20 18:11:40,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:40,205 INFO L93 Difference]: Finished difference Result 868 states and 1193 transitions. [2022-02-20 18:11:40,205 INFO L276 IsEmpty]: Start isEmpty. Operand 868 states and 1193 transitions. [2022-02-20 18:11:40,208 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:40,208 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:40,208 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:40,208 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:40,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 841 states, 636 states have (on average 1.2751572327044025) internal successors, (811), 703 states have internal predecessors, (811), 118 states have call successors, (118), 73 states have call predecessors, (118), 86 states have return successors, (233), 132 states have call predecessors, (233), 118 states have call successors, (233) [2022-02-20 18:11:40,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 841 states to 841 states and 1162 transitions. [2022-02-20 18:11:40,256 INFO L78 Accepts]: Start accepts. Automaton has 841 states and 1162 transitions. Word has length 83 [2022-02-20 18:11:40,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:40,257 INFO L470 AbstractCegarLoop]: Abstraction has 841 states and 1162 transitions. [2022-02-20 18:11:40,257 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.428571428571429) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:11:40,257 INFO L276 IsEmpty]: Start isEmpty. Operand 841 states and 1162 transitions. [2022-02-20 18:11:40,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-02-20 18:11:40,260 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:40,260 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:40,260 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:11:40,260 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:40,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:40,261 INFO L85 PathProgramCache]: Analyzing trace with hash -682729835, now seen corresponding path program 1 times [2022-02-20 18:11:40,261 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:40,261 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037468939] [2022-02-20 18:11:40,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:40,261 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:40,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:40,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,310 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #351#return; {27361#true} is VALID [2022-02-20 18:11:40,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:40,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,315 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,315 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,316 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #353#return; {27361#true} is VALID [2022-02-20 18:11:40,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:40,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,319 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,319 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,319 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #355#return; {27361#true} is VALID [2022-02-20 18:11:40,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:40,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,322 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,322 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,322 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #357#return; {27361#true} is VALID [2022-02-20 18:11:40,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:40,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,325 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #359#return; {27361#true} is VALID [2022-02-20 18:11:40,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:40,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,327 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,327 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,328 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #361#return; {27361#true} is VALID [2022-02-20 18:11:40,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:40,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,332 INFO L290 TraceCheckUtils]: 0: Hoare triple {27427#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27361#true} is VALID [2022-02-20 18:11:40,332 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,332 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27361#true} #363#return; {27361#true} is VALID [2022-02-20 18:11:40,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:11:40,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:40,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:40,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:11:40,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,366 INFO L290 TraceCheckUtils]: 0: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,366 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,367 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {27361#true} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,368 INFO L290 TraceCheckUtils]: 1: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,368 INFO L290 TraceCheckUtils]: 2: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,368 INFO L290 TraceCheckUtils]: 3: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,369 INFO L290 TraceCheckUtils]: 4: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,369 INFO L290 TraceCheckUtils]: 5: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,369 INFO L290 TraceCheckUtils]: 6: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,369 INFO L290 TraceCheckUtils]: 7: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,370 INFO L290 TraceCheckUtils]: 8: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,370 INFO L272 TraceCheckUtils]: 9: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,370 INFO L290 TraceCheckUtils]: 10: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,370 INFO L290 TraceCheckUtils]: 11: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,371 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {27361#true} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,371 INFO L290 TraceCheckUtils]: 13: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,372 INFO L290 TraceCheckUtils]: 14: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,373 INFO L290 TraceCheckUtils]: 15: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,373 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #379#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,373 INFO L290 TraceCheckUtils]: 0: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,373 INFO L272 TraceCheckUtils]: 1: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,374 INFO L290 TraceCheckUtils]: 2: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,374 INFO L290 TraceCheckUtils]: 3: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,375 INFO L290 TraceCheckUtils]: 4: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,375 INFO L290 TraceCheckUtils]: 5: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,375 INFO L290 TraceCheckUtils]: 6: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,376 INFO L290 TraceCheckUtils]: 7: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,376 INFO L290 TraceCheckUtils]: 8: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,376 INFO L290 TraceCheckUtils]: 9: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,376 INFO L290 TraceCheckUtils]: 10: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,377 INFO L272 TraceCheckUtils]: 11: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,377 INFO L290 TraceCheckUtils]: 12: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,377 INFO L290 TraceCheckUtils]: 13: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,377 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {27361#true} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,378 INFO L290 TraceCheckUtils]: 15: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,378 INFO L290 TraceCheckUtils]: 16: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,378 INFO L290 TraceCheckUtils]: 17: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,379 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #379#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,379 INFO L290 TraceCheckUtils]: 19: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,379 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #345#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,379 INFO L290 TraceCheckUtils]: 0: Hoare triple {27428#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {27361#true} is VALID [2022-02-20 18:11:40,380 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27361#true} is VALID [2022-02-20 18:11:40,380 INFO L290 TraceCheckUtils]: 2: Hoare triple {27361#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27361#true} is VALID [2022-02-20 18:11:40,380 INFO L272 TraceCheckUtils]: 3: Hoare triple {27361#true} call processEnvironment__before__methaneAlarm(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,380 INFO L290 TraceCheckUtils]: 4: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,381 INFO L272 TraceCheckUtils]: 5: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,381 INFO L290 TraceCheckUtils]: 6: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,381 INFO L290 TraceCheckUtils]: 7: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,381 INFO L290 TraceCheckUtils]: 8: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,382 INFO L290 TraceCheckUtils]: 9: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,382 INFO L290 TraceCheckUtils]: 10: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,382 INFO L290 TraceCheckUtils]: 11: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,383 INFO L290 TraceCheckUtils]: 12: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,383 INFO L290 TraceCheckUtils]: 13: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,383 INFO L290 TraceCheckUtils]: 14: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,384 INFO L272 TraceCheckUtils]: 15: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,384 INFO L290 TraceCheckUtils]: 16: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,384 INFO L290 TraceCheckUtils]: 17: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,384 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {27361#true} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,384 INFO L290 TraceCheckUtils]: 19: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,385 INFO L290 TraceCheckUtils]: 20: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,385 INFO L290 TraceCheckUtils]: 21: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,385 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #379#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,386 INFO L290 TraceCheckUtils]: 23: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,386 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #345#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,386 INFO L290 TraceCheckUtils]: 25: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,386 INFO L290 TraceCheckUtils]: 26: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,387 INFO L290 TraceCheckUtils]: 27: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,387 INFO L290 TraceCheckUtils]: 28: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,388 INFO L290 TraceCheckUtils]: 29: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,388 INFO L290 TraceCheckUtils]: 30: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,388 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #369#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-02-20 18:11:40,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:40,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:40,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,409 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,410 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {27361#true} {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #335#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,410 INFO L290 TraceCheckUtils]: 0: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,410 INFO L272 TraceCheckUtils]: 1: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27361#true} is VALID [2022-02-20 18:11:40,410 INFO L290 TraceCheckUtils]: 2: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,411 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {27361#true} {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #335#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,411 INFO L290 TraceCheckUtils]: 4: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,411 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27361#true} #379#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,411 INFO L290 TraceCheckUtils]: 0: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,412 INFO L272 TraceCheckUtils]: 1: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,412 INFO L290 TraceCheckUtils]: 2: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,412 INFO L272 TraceCheckUtils]: 3: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27361#true} is VALID [2022-02-20 18:11:40,412 INFO L290 TraceCheckUtils]: 4: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,413 INFO L284 TraceCheckUtils]: 5: Hoare quadruple {27361#true} {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #335#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,413 INFO L290 TraceCheckUtils]: 6: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,413 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27361#true} #379#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,414 INFO L290 TraceCheckUtils]: 8: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,414 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #345#return; {27362#false} is VALID [2022-02-20 18:11:40,414 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {27361#true} is VALID [2022-02-20 18:11:40,414 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,414 INFO L290 TraceCheckUtils]: 2: Hoare triple {27361#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L272 TraceCheckUtils]: 3: Hoare triple {27361#true} call select_features_#t~ret55#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L290 TraceCheckUtils]: 4: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L290 TraceCheckUtils]: 5: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {27361#true} {27361#true} #351#return; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L290 TraceCheckUtils]: 7: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L272 TraceCheckUtils]: 8: Hoare triple {27361#true} call select_features_#t~ret56#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L290 TraceCheckUtils]: 9: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L290 TraceCheckUtils]: 10: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,415 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {27361#true} {27361#true} #353#return; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L290 TraceCheckUtils]: 12: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L272 TraceCheckUtils]: 13: Hoare triple {27361#true} call select_features_#t~ret57#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L290 TraceCheckUtils]: 14: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L290 TraceCheckUtils]: 15: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27361#true} {27361#true} #355#return; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L290 TraceCheckUtils]: 17: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L272 TraceCheckUtils]: 18: Hoare triple {27361#true} call select_features_#t~ret58#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,416 INFO L290 TraceCheckUtils]: 19: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L290 TraceCheckUtils]: 20: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {27361#true} {27361#true} #357#return; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L290 TraceCheckUtils]: 22: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L272 TraceCheckUtils]: 23: Hoare triple {27361#true} call select_features_#t~ret59#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L290 TraceCheckUtils]: 24: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L290 TraceCheckUtils]: 25: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {27361#true} {27361#true} #359#return; {27361#true} is VALID [2022-02-20 18:11:40,417 INFO L290 TraceCheckUtils]: 27: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L272 TraceCheckUtils]: 28: Hoare triple {27361#true} call select_features_#t~ret60#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 29: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 30: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {27361#true} {27361#true} #361#return; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 32: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 33: Hoare triple {27361#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 34: Hoare triple {27361#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {27361#true} is VALID [2022-02-20 18:11:40,418 INFO L290 TraceCheckUtils]: 35: Hoare triple {27361#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L290 TraceCheckUtils]: 36: Hoare triple {27361#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L290 TraceCheckUtils]: 37: Hoare triple {27361#true} assume !false; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L290 TraceCheckUtils]: 38: Hoare triple {27361#true} assume test_~splverifierCounter~0#1 < 4; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L290 TraceCheckUtils]: 39: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L290 TraceCheckUtils]: 40: Hoare triple {27361#true} assume 0 != test_~tmp~8#1; {27361#true} is VALID [2022-02-20 18:11:40,419 INFO L272 TraceCheckUtils]: 41: Hoare triple {27361#true} call waterRise(); {27427#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 42: Hoare triple {27427#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 43: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {27361#true} {27361#true} #363#return; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 45: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 46: Hoare triple {27361#true} assume !(0 != test_~tmp___0~3#1); {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 47: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 48: Hoare triple {27361#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27361#true} is VALID [2022-02-20 18:11:40,420 INFO L290 TraceCheckUtils]: 49: Hoare triple {27361#true} assume !(0 != test_~tmp___1~0#1); {27361#true} is VALID [2022-02-20 18:11:40,421 INFO L272 TraceCheckUtils]: 50: Hoare triple {27361#true} call timeShift(); {27428#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:40,421 INFO L290 TraceCheckUtils]: 51: Hoare triple {27428#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {27361#true} is VALID [2022-02-20 18:11:40,421 INFO L290 TraceCheckUtils]: 52: Hoare triple {27361#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27361#true} is VALID [2022-02-20 18:11:40,421 INFO L290 TraceCheckUtils]: 53: Hoare triple {27361#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27361#true} is VALID [2022-02-20 18:11:40,421 INFO L272 TraceCheckUtils]: 54: Hoare triple {27361#true} call processEnvironment__before__methaneAlarm(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,422 INFO L290 TraceCheckUtils]: 55: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,422 INFO L272 TraceCheckUtils]: 56: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,422 INFO L290 TraceCheckUtils]: 57: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,423 INFO L290 TraceCheckUtils]: 58: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,423 INFO L290 TraceCheckUtils]: 59: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,423 INFO L290 TraceCheckUtils]: 60: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,423 INFO L290 TraceCheckUtils]: 61: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,424 INFO L290 TraceCheckUtils]: 62: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,424 INFO L290 TraceCheckUtils]: 63: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,424 INFO L290 TraceCheckUtils]: 64: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,425 INFO L290 TraceCheckUtils]: 65: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,425 INFO L272 TraceCheckUtils]: 66: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,425 INFO L290 TraceCheckUtils]: 67: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,425 INFO L290 TraceCheckUtils]: 68: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,426 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {27361#true} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,426 INFO L290 TraceCheckUtils]: 70: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,426 INFO L290 TraceCheckUtils]: 71: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,426 INFO L290 TraceCheckUtils]: 72: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,427 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #379#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,427 INFO L290 TraceCheckUtils]: 74: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,427 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #345#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,428 INFO L290 TraceCheckUtils]: 76: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,428 INFO L290 TraceCheckUtils]: 77: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,428 INFO L290 TraceCheckUtils]: 78: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,428 INFO L290 TraceCheckUtils]: 79: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,429 INFO L290 TraceCheckUtils]: 80: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,429 INFO L290 TraceCheckUtils]: 81: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,429 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #369#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,430 INFO L290 TraceCheckUtils]: 83: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,430 INFO L290 TraceCheckUtils]: 84: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,430 INFO L290 TraceCheckUtils]: 85: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,430 INFO L290 TraceCheckUtils]: 86: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~8#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,431 INFO L290 TraceCheckUtils]: 87: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,431 INFO L290 TraceCheckUtils]: 88: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~3#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,431 INFO L290 TraceCheckUtils]: 89: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,432 INFO L290 TraceCheckUtils]: 90: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,432 INFO L290 TraceCheckUtils]: 91: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___1~0#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,432 INFO L272 TraceCheckUtils]: 92: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,433 INFO L290 TraceCheckUtils]: 93: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,433 INFO L290 TraceCheckUtils]: 94: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,433 INFO L290 TraceCheckUtils]: 95: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,433 INFO L290 TraceCheckUtils]: 96: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,434 INFO L290 TraceCheckUtils]: 97: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,434 INFO L272 TraceCheckUtils]: 98: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,434 INFO L290 TraceCheckUtils]: 99: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,435 INFO L272 TraceCheckUtils]: 100: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:40,435 INFO L290 TraceCheckUtils]: 101: Hoare triple {27450#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,435 INFO L272 TraceCheckUtils]: 102: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} call processEnvironment__before__highWaterSensor(); {27361#true} is VALID [2022-02-20 18:11:40,435 INFO L290 TraceCheckUtils]: 103: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,435 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {27361#true} {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} #335#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,436 INFO L290 TraceCheckUtils]: 105: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,436 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27361#true} #379#return; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,436 INFO L290 TraceCheckUtils]: 107: Hoare triple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} assume true; {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} is VALID [2022-02-20 18:11:40,437 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {27477#(= 0 ~__SELECTED_FEATURE_highWaterSensor~0)} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #345#return; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 109: Hoare triple {27362#false} assume { :end_inline_processEnvironment } true; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 110: Hoare triple {27362#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 111: Hoare triple {27362#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 112: Hoare triple {27362#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 113: Hoare triple {27362#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 114: Hoare triple {27362#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {27362#false} is VALID [2022-02-20 18:11:40,437 INFO L290 TraceCheckUtils]: 115: Hoare triple {27362#false} assume !false; {27362#false} is VALID [2022-02-20 18:11:40,438 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 17 proven. 5 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-02-20 18:11:40,438 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:40,438 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037468939] [2022-02-20 18:11:40,438 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037468939] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:40,438 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1313539589] [2022-02-20 18:11:40,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:40,439 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:40,439 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:40,466 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:40,536 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:11:40,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 567 conjuncts, 3 conjunts are in the unsatisfiable core [2022-02-20 18:11:40,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:40,718 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:40,950 INFO L290 TraceCheckUtils]: 0: Hoare triple {27361#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {27361#true} is VALID [2022-02-20 18:11:40,950 INFO L290 TraceCheckUtils]: 1: Hoare triple {27361#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,950 INFO L290 TraceCheckUtils]: 2: Hoare triple {27361#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {27361#true} is VALID [2022-02-20 18:11:40,950 INFO L272 TraceCheckUtils]: 3: Hoare triple {27361#true} call select_features_#t~ret55#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,950 INFO L290 TraceCheckUtils]: 4: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L290 TraceCheckUtils]: 5: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {27361#true} {27361#true} #351#return; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L290 TraceCheckUtils]: 7: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L272 TraceCheckUtils]: 8: Hoare triple {27361#true} call select_features_#t~ret56#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L290 TraceCheckUtils]: 9: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L290 TraceCheckUtils]: 10: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,951 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {27361#true} {27361#true} #353#return; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L290 TraceCheckUtils]: 12: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L272 TraceCheckUtils]: 13: Hoare triple {27361#true} call select_features_#t~ret57#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L290 TraceCheckUtils]: 14: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L290 TraceCheckUtils]: 15: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {27361#true} {27361#true} #355#return; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L290 TraceCheckUtils]: 17: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {27361#true} is VALID [2022-02-20 18:11:40,952 INFO L272 TraceCheckUtils]: 18: Hoare triple {27361#true} call select_features_#t~ret58#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L290 TraceCheckUtils]: 19: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L290 TraceCheckUtils]: 20: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {27361#true} {27361#true} #357#return; {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L290 TraceCheckUtils]: 22: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L272 TraceCheckUtils]: 23: Hoare triple {27361#true} call select_features_#t~ret59#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L290 TraceCheckUtils]: 24: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,953 INFO L290 TraceCheckUtils]: 25: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {27361#true} {27361#true} #359#return; {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L290 TraceCheckUtils]: 27: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L272 TraceCheckUtils]: 28: Hoare triple {27361#true} call select_features_#t~ret60#1 := select_one(); {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L290 TraceCheckUtils]: 29: Hoare triple {27361#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L290 TraceCheckUtils]: 30: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,954 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {27361#true} {27361#true} #361#return; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 32: Hoare triple {27361#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 33: Hoare triple {27361#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 34: Hoare triple {27361#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 35: Hoare triple {27361#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 36: Hoare triple {27361#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 37: Hoare triple {27361#true} assume !false; {27361#true} is VALID [2022-02-20 18:11:40,955 INFO L290 TraceCheckUtils]: 38: Hoare triple {27361#true} assume test_~splverifierCounter~0#1 < 4; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L290 TraceCheckUtils]: 39: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L290 TraceCheckUtils]: 40: Hoare triple {27361#true} assume 0 != test_~tmp~8#1; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L272 TraceCheckUtils]: 41: Hoare triple {27361#true} call waterRise(); {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L290 TraceCheckUtils]: 42: Hoare triple {27361#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L290 TraceCheckUtils]: 43: Hoare triple {27361#true} assume true; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {27361#true} {27361#true} #363#return; {27361#true} is VALID [2022-02-20 18:11:40,956 INFO L290 TraceCheckUtils]: 45: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 46: Hoare triple {27361#true} assume !(0 != test_~tmp___0~3#1); {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 47: Hoare triple {27361#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 48: Hoare triple {27361#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 49: Hoare triple {27361#true} assume !(0 != test_~tmp___1~0#1); {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L272 TraceCheckUtils]: 50: Hoare triple {27361#true} call timeShift(); {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 51: Hoare triple {27361#true} assume !(0 != ~pumpRunning~0); {27361#true} is VALID [2022-02-20 18:11:40,957 INFO L290 TraceCheckUtils]: 52: Hoare triple {27361#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27361#true} is VALID [2022-02-20 18:11:40,958 INFO L290 TraceCheckUtils]: 53: Hoare triple {27361#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27361#true} is VALID [2022-02-20 18:11:40,958 INFO L272 TraceCheckUtils]: 54: Hoare triple {27361#true} call processEnvironment__before__methaneAlarm(); {27361#true} is VALID [2022-02-20 18:11:40,958 INFO L290 TraceCheckUtils]: 55: Hoare triple {27361#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27361#true} is VALID [2022-02-20 18:11:40,958 INFO L272 TraceCheckUtils]: 56: Hoare triple {27361#true} call processEnvironment__before__lowWaterSensor(); {27361#true} is VALID [2022-02-20 18:11:40,958 INFO L290 TraceCheckUtils]: 57: Hoare triple {27361#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,959 INFO L290 TraceCheckUtils]: 58: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,959 INFO L290 TraceCheckUtils]: 59: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,959 INFO L290 TraceCheckUtils]: 60: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,960 INFO L290 TraceCheckUtils]: 61: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,960 INFO L290 TraceCheckUtils]: 62: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,960 INFO L290 TraceCheckUtils]: 63: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,961 INFO L290 TraceCheckUtils]: 64: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,961 INFO L290 TraceCheckUtils]: 65: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,961 INFO L272 TraceCheckUtils]: 66: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call activatePump__before__methaneQuery(); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,962 INFO L290 TraceCheckUtils]: 67: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} ~pumpRunning~0 := 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,962 INFO L290 TraceCheckUtils]: 68: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,962 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #329#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,963 INFO L290 TraceCheckUtils]: 70: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_activatePump } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,963 INFO L290 TraceCheckUtils]: 71: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,963 INFO L290 TraceCheckUtils]: 72: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,964 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #379#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,964 INFO L290 TraceCheckUtils]: 74: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,964 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #345#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,965 INFO L290 TraceCheckUtils]: 76: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_processEnvironment } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,965 INFO L290 TraceCheckUtils]: 77: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,965 INFO L290 TraceCheckUtils]: 78: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,966 INFO L290 TraceCheckUtils]: 79: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,966 INFO L290 TraceCheckUtils]: 80: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,966 INFO L290 TraceCheckUtils]: 81: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,967 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} {27361#true} #369#return; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,967 INFO L290 TraceCheckUtils]: 83: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !false; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,967 INFO L290 TraceCheckUtils]: 84: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume test_~splverifierCounter~0#1 < 4; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,968 INFO L290 TraceCheckUtils]: 85: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,968 INFO L290 TraceCheckUtils]: 86: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp~8#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,968 INFO L290 TraceCheckUtils]: 87: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,969 INFO L290 TraceCheckUtils]: 88: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___0~3#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,969 INFO L290 TraceCheckUtils]: 89: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,969 INFO L290 TraceCheckUtils]: 90: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,970 INFO L290 TraceCheckUtils]: 91: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != test_~tmp___1~0#1); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,970 INFO L272 TraceCheckUtils]: 92: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call timeShift(); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,970 INFO L290 TraceCheckUtils]: 93: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,971 INFO L290 TraceCheckUtils]: 94: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,971 INFO L290 TraceCheckUtils]: 95: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume { :end_inline_lowerWaterLevel } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,971 INFO L290 TraceCheckUtils]: 96: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,972 INFO L290 TraceCheckUtils]: 97: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,972 INFO L272 TraceCheckUtils]: 98: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__methaneAlarm(); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,972 INFO L290 TraceCheckUtils]: 99: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,973 INFO L272 TraceCheckUtils]: 100: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} call processEnvironment__before__lowWaterSensor(); {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} is VALID [2022-02-20 18:11:40,973 INFO L290 TraceCheckUtils]: 101: Hoare triple {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} assume !(0 != ~__SELECTED_FEATURE_highWaterSensor~0); {27362#false} is VALID [2022-02-20 18:11:40,973 INFO L272 TraceCheckUtils]: 102: Hoare triple {27362#false} call processEnvironment__before__highWaterSensor(); {27362#false} is VALID [2022-02-20 18:11:40,973 INFO L290 TraceCheckUtils]: 103: Hoare triple {27362#false} assume true; {27362#false} is VALID [2022-02-20 18:11:40,973 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {27362#false} {27362#false} #335#return; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L290 TraceCheckUtils]: 105: Hoare triple {27362#false} assume true; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {27362#false} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #379#return; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L290 TraceCheckUtils]: 107: Hoare triple {27362#false} assume true; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {27362#false} {27416#(not (= 0 ~__SELECTED_FEATURE_highWaterSensor~0))} #345#return; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L290 TraceCheckUtils]: 109: Hoare triple {27362#false} assume { :end_inline_processEnvironment } true; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L290 TraceCheckUtils]: 110: Hoare triple {27362#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {27362#false} is VALID [2022-02-20 18:11:40,974 INFO L290 TraceCheckUtils]: 111: Hoare triple {27362#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {27362#false} is VALID [2022-02-20 18:11:40,975 INFO L290 TraceCheckUtils]: 112: Hoare triple {27362#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {27362#false} is VALID [2022-02-20 18:11:40,975 INFO L290 TraceCheckUtils]: 113: Hoare triple {27362#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {27362#false} is VALID [2022-02-20 18:11:40,975 INFO L290 TraceCheckUtils]: 114: Hoare triple {27362#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {27362#false} is VALID [2022-02-20 18:11:40,975 INFO L290 TraceCheckUtils]: 115: Hoare triple {27362#false} assume !false; {27362#false} is VALID [2022-02-20 18:11:40,975 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:40,976 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:40,976 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1313539589] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:40,976 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:11:40,976 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-02-20 18:11:40,976 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476803122] [2022-02-20 18:11:40,977 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:40,977 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 116 [2022-02-20 18:11:40,977 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:40,978 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:41,036 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 106 edges. 106 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:41,036 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:41,036 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:41,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:41,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:41,040 INFO L87 Difference]: Start difference. First operand 841 states and 1162 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:41,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:41,492 INFO L93 Difference]: Finished difference Result 2030 states and 2905 transitions. [2022-02-20 18:11:41,492 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:41,492 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 116 [2022-02-20 18:11:41,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:41,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:41,495 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 375 transitions. [2022-02-20 18:11:41,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:41,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 375 transitions. [2022-02-20 18:11:41,498 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 375 transitions. [2022-02-20 18:11:41,719 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 375 edges. 375 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:41,786 INFO L225 Difference]: With dead ends: 2030 [2022-02-20 18:11:41,786 INFO L226 Difference]: Without dead ends: 1211 [2022-02-20 18:11:41,790 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 144 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:41,790 INFO L933 BasicCegarLoop]: 231 mSDtfsCounter, 90 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:41,791 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [90 Valid, 322 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:41,792 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1211 states. [2022-02-20 18:11:41,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1211 to 1211. [2022-02-20 18:11:41,941 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:41,944 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1211 states. Second operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) [2022-02-20 18:11:41,946 INFO L74 IsIncluded]: Start isIncluded. First operand 1211 states. Second operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) [2022-02-20 18:11:41,947 INFO L87 Difference]: Start difference. First operand 1211 states. Second operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) [2022-02-20 18:11:41,999 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:42,000 INFO L93 Difference]: Finished difference Result 1211 states and 1693 transitions. [2022-02-20 18:11:42,000 INFO L276 IsEmpty]: Start isEmpty. Operand 1211 states and 1693 transitions. [2022-02-20 18:11:42,004 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:42,004 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:42,006 INFO L74 IsIncluded]: Start isIncluded. First operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) Second operand 1211 states. [2022-02-20 18:11:42,008 INFO L87 Difference]: Start difference. First operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) Second operand 1211 states. [2022-02-20 18:11:42,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:42,061 INFO L93 Difference]: Finished difference Result 1211 states and 1693 transitions. [2022-02-20 18:11:42,061 INFO L276 IsEmpty]: Start isEmpty. Operand 1211 states and 1693 transitions. [2022-02-20 18:11:42,065 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:42,066 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:42,066 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:42,066 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:42,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1211 states, 915 states have (on average 1.2808743169398906) internal successors, (1172), 1001 states have internal predecessors, (1172), 167 states have call successors, (167), 118 states have call predecessors, (167), 128 states have return successors, (354), 178 states have call predecessors, (354), 167 states have call successors, (354) [2022-02-20 18:11:42,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1211 states to 1211 states and 1693 transitions. [2022-02-20 18:11:42,144 INFO L78 Accepts]: Start accepts. Automaton has 1211 states and 1693 transitions. Word has length 116 [2022-02-20 18:11:42,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:42,144 INFO L470 AbstractCegarLoop]: Abstraction has 1211 states and 1693 transitions. [2022-02-20 18:11:42,145 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:11:42,145 INFO L276 IsEmpty]: Start isEmpty. Operand 1211 states and 1693 transitions. [2022-02-20 18:11:42,150 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2022-02-20 18:11:42,150 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:42,150 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:42,186 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:42,369 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:11:42,369 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:42,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:42,370 INFO L85 PathProgramCache]: Analyzing trace with hash -2105279047, now seen corresponding path program 1 times [2022-02-20 18:11:42,370 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:42,370 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564736048] [2022-02-20 18:11:42,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:42,370 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:42,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:42,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,437 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,438 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,438 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #351#return; {34882#true} is VALID [2022-02-20 18:11:42,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:11:42,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,440 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,440 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,441 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #353#return; {34882#true} is VALID [2022-02-20 18:11:42,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:42,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,443 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,443 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,443 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #355#return; {34882#true} is VALID [2022-02-20 18:11:42,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:42,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,446 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,446 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #357#return; {34882#true} is VALID [2022-02-20 18:11:42,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:11:42,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,448 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,448 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,449 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #359#return; {34882#true} is VALID [2022-02-20 18:11:42,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-02-20 18:11:42,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,451 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,451 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,451 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #361#return; {34882#true} is VALID [2022-02-20 18:11:42,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-02-20 18:11:42,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {34953#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34882#true} is VALID [2022-02-20 18:11:42,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,457 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34882#true} #363#return; {34882#true} is VALID [2022-02-20 18:11:42,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-02-20 18:11:42,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-02-20 18:11:42,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:42,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2022-02-20 18:11:42,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,515 INFO L290 TraceCheckUtils]: 0: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,515 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,515 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,515 INFO L290 TraceCheckUtils]: 0: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,515 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:42,516 INFO L290 TraceCheckUtils]: 2: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,516 INFO L290 TraceCheckUtils]: 3: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,516 INFO L290 TraceCheckUtils]: 4: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,517 INFO L290 TraceCheckUtils]: 5: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,517 INFO L290 TraceCheckUtils]: 6: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,517 INFO L290 TraceCheckUtils]: 7: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,518 INFO L290 TraceCheckUtils]: 8: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,518 INFO L272 TraceCheckUtils]: 9: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,518 INFO L290 TraceCheckUtils]: 10: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,518 INFO L290 TraceCheckUtils]: 11: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,519 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,519 INFO L290 TraceCheckUtils]: 13: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,519 INFO L290 TraceCheckUtils]: 14: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,520 INFO L290 TraceCheckUtils]: 15: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,520 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,520 INFO L290 TraceCheckUtils]: 0: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:42,520 INFO L272 TraceCheckUtils]: 1: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,521 INFO L290 TraceCheckUtils]: 2: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,521 INFO L290 TraceCheckUtils]: 3: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:42,521 INFO L290 TraceCheckUtils]: 4: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,521 INFO L290 TraceCheckUtils]: 5: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,522 INFO L290 TraceCheckUtils]: 6: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,522 INFO L290 TraceCheckUtils]: 7: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,522 INFO L290 TraceCheckUtils]: 8: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,523 INFO L290 TraceCheckUtils]: 9: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,523 INFO L290 TraceCheckUtils]: 10: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,523 INFO L272 TraceCheckUtils]: 11: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,523 INFO L290 TraceCheckUtils]: 12: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,524 INFO L290 TraceCheckUtils]: 13: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,524 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,524 INFO L290 TraceCheckUtils]: 15: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,524 INFO L290 TraceCheckUtils]: 16: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,525 INFO L290 TraceCheckUtils]: 17: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,525 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,525 INFO L290 TraceCheckUtils]: 19: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,526 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #345#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {34954#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:42,526 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34882#true} is VALID [2022-02-20 18:11:42,526 INFO L290 TraceCheckUtils]: 2: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34882#true} is VALID [2022-02-20 18:11:42,526 INFO L272 TraceCheckUtils]: 3: Hoare triple {34882#true} call processEnvironment__before__methaneAlarm(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,527 INFO L290 TraceCheckUtils]: 4: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:42,527 INFO L272 TraceCheckUtils]: 5: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,527 INFO L290 TraceCheckUtils]: 6: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,527 INFO L290 TraceCheckUtils]: 7: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:42,528 INFO L290 TraceCheckUtils]: 8: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,528 INFO L290 TraceCheckUtils]: 9: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,528 INFO L290 TraceCheckUtils]: 10: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,528 INFO L290 TraceCheckUtils]: 11: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,529 INFO L290 TraceCheckUtils]: 12: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,529 INFO L290 TraceCheckUtils]: 13: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,529 INFO L290 TraceCheckUtils]: 14: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,530 INFO L272 TraceCheckUtils]: 15: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,530 INFO L290 TraceCheckUtils]: 16: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,530 INFO L290 TraceCheckUtils]: 17: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,530 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,531 INFO L290 TraceCheckUtils]: 19: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,531 INFO L290 TraceCheckUtils]: 20: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,531 INFO L290 TraceCheckUtils]: 21: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,531 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,532 INFO L290 TraceCheckUtils]: 23: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,532 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #345#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,532 INFO L290 TraceCheckUtils]: 25: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,533 INFO L290 TraceCheckUtils]: 26: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,533 INFO L290 TraceCheckUtils]: 27: Hoare triple {34937#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,533 INFO L290 TraceCheckUtils]: 28: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,534 INFO L290 TraceCheckUtils]: 29: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,534 INFO L290 TraceCheckUtils]: 30: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,534 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #369#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-02-20 18:11:42,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:11:42,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:11:42,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {34882#true} {34882#true} #333#return; {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume !(0 == ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L272 TraceCheckUtils]: 2: Hoare triple {34882#true} call processEnvironment__before__highWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L290 TraceCheckUtils]: 3: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {34882#true} {34882#true} #333#return; {34882#true} is VALID [2022-02-20 18:11:42,543 INFO L290 TraceCheckUtils]: 5: Hoare triple {34882#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34882#true} is VALID [2022-02-20 18:11:42,544 INFO L290 TraceCheckUtils]: 6: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,544 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {34882#true} {34882#true} #379#return; {34882#true} is VALID [2022-02-20 18:11:42,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:42,544 INFO L272 TraceCheckUtils]: 1: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,544 INFO L290 TraceCheckUtils]: 2: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,544 INFO L290 TraceCheckUtils]: 3: Hoare triple {34882#true} assume !(0 == ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L272 TraceCheckUtils]: 4: Hoare triple {34882#true} call processEnvironment__before__highWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L290 TraceCheckUtils]: 5: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34882#true} {34882#true} #333#return; {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L290 TraceCheckUtils]: 7: Hoare triple {34882#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L290 TraceCheckUtils]: 8: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L284 TraceCheckUtils]: 9: Hoare quadruple {34882#true} {34882#true} #379#return; {34882#true} is VALID [2022-02-20 18:11:42,545 INFO L290 TraceCheckUtils]: 10: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34882#true} {34938#(<= 1 ~waterLevel~0)} #345#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,546 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L290 TraceCheckUtils]: 2: Hoare triple {34882#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L272 TraceCheckUtils]: 3: Hoare triple {34882#true} call select_features_#t~ret55#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L290 TraceCheckUtils]: 4: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,546 INFO L290 TraceCheckUtils]: 5: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34882#true} {34882#true} #351#return; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L290 TraceCheckUtils]: 7: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L272 TraceCheckUtils]: 8: Hoare triple {34882#true} call select_features_#t~ret56#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L290 TraceCheckUtils]: 9: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L290 TraceCheckUtils]: 10: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34882#true} {34882#true} #353#return; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L290 TraceCheckUtils]: 12: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34882#true} is VALID [2022-02-20 18:11:42,547 INFO L272 TraceCheckUtils]: 13: Hoare triple {34882#true} call select_features_#t~ret57#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L290 TraceCheckUtils]: 14: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L290 TraceCheckUtils]: 15: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34882#true} {34882#true} #355#return; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L290 TraceCheckUtils]: 17: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L272 TraceCheckUtils]: 18: Hoare triple {34882#true} call select_features_#t~ret58#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L290 TraceCheckUtils]: 19: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L290 TraceCheckUtils]: 20: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,548 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34882#true} {34882#true} #357#return; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 22: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L272 TraceCheckUtils]: 23: Hoare triple {34882#true} call select_features_#t~ret59#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 24: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 25: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34882#true} {34882#true} #359#return; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 27: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L272 TraceCheckUtils]: 28: Hoare triple {34882#true} call select_features_#t~ret60#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 29: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:42,549 INFO L290 TraceCheckUtils]: 30: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34882#true} {34882#true} #361#return; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 32: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 33: Hoare triple {34882#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 34: Hoare triple {34882#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 35: Hoare triple {34882#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 36: Hoare triple {34882#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 37: Hoare triple {34882#true} assume !false; {34882#true} is VALID [2022-02-20 18:11:42,550 INFO L290 TraceCheckUtils]: 38: Hoare triple {34882#true} assume test_~splverifierCounter~0#1 < 4; {34882#true} is VALID [2022-02-20 18:11:42,551 INFO L290 TraceCheckUtils]: 39: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34882#true} is VALID [2022-02-20 18:11:42,551 INFO L290 TraceCheckUtils]: 40: Hoare triple {34882#true} assume 0 != test_~tmp~8#1; {34882#true} is VALID [2022-02-20 18:11:42,551 INFO L272 TraceCheckUtils]: 41: Hoare triple {34882#true} call waterRise(); {34953#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:11:42,551 INFO L290 TraceCheckUtils]: 42: Hoare triple {34953#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34882#true} is VALID [2022-02-20 18:11:42,551 INFO L290 TraceCheckUtils]: 43: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,551 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {34882#true} {34882#true} #363#return; {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L290 TraceCheckUtils]: 45: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L290 TraceCheckUtils]: 46: Hoare triple {34882#true} assume !(0 != test_~tmp___0~3#1); {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L290 TraceCheckUtils]: 47: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L290 TraceCheckUtils]: 48: Hoare triple {34882#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L290 TraceCheckUtils]: 49: Hoare triple {34882#true} assume !(0 != test_~tmp___1~0#1); {34882#true} is VALID [2022-02-20 18:11:42,552 INFO L272 TraceCheckUtils]: 50: Hoare triple {34882#true} call timeShift(); {34954#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:11:42,553 INFO L290 TraceCheckUtils]: 51: Hoare triple {34954#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:42,553 INFO L290 TraceCheckUtils]: 52: Hoare triple {34882#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34882#true} is VALID [2022-02-20 18:11:42,553 INFO L290 TraceCheckUtils]: 53: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34882#true} is VALID [2022-02-20 18:11:42,553 INFO L272 TraceCheckUtils]: 54: Hoare triple {34882#true} call processEnvironment__before__methaneAlarm(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,553 INFO L290 TraceCheckUtils]: 55: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:42,554 INFO L272 TraceCheckUtils]: 56: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,554 INFO L290 TraceCheckUtils]: 57: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,554 INFO L290 TraceCheckUtils]: 58: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:42,554 INFO L290 TraceCheckUtils]: 59: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,554 INFO L290 TraceCheckUtils]: 60: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,555 INFO L290 TraceCheckUtils]: 61: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,555 INFO L290 TraceCheckUtils]: 62: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,555 INFO L290 TraceCheckUtils]: 63: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,556 INFO L290 TraceCheckUtils]: 64: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,556 INFO L290 TraceCheckUtils]: 65: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,556 INFO L272 TraceCheckUtils]: 66: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,556 INFO L290 TraceCheckUtils]: 67: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:42,557 INFO L290 TraceCheckUtils]: 68: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,557 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,557 INFO L290 TraceCheckUtils]: 70: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,557 INFO L290 TraceCheckUtils]: 71: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,558 INFO L290 TraceCheckUtils]: 72: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,558 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,558 INFO L290 TraceCheckUtils]: 74: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,559 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #345#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,559 INFO L290 TraceCheckUtils]: 76: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,559 INFO L290 TraceCheckUtils]: 77: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,560 INFO L290 TraceCheckUtils]: 78: Hoare triple {34937#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,560 INFO L290 TraceCheckUtils]: 79: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,572 INFO L290 TraceCheckUtils]: 80: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,583 INFO L290 TraceCheckUtils]: 81: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,584 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #369#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,584 INFO L290 TraceCheckUtils]: 83: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !false; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,584 INFO L290 TraceCheckUtils]: 84: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,584 INFO L290 TraceCheckUtils]: 85: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,585 INFO L290 TraceCheckUtils]: 86: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~8#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,585 INFO L290 TraceCheckUtils]: 87: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,585 INFO L290 TraceCheckUtils]: 88: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,586 INFO L290 TraceCheckUtils]: 89: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,586 INFO L290 TraceCheckUtils]: 90: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,586 INFO L290 TraceCheckUtils]: 91: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___1~0#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,587 INFO L272 TraceCheckUtils]: 92: Hoare triple {34937#(<= 2 ~waterLevel~0)} call timeShift(); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,587 INFO L290 TraceCheckUtils]: 93: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,587 INFO L290 TraceCheckUtils]: 94: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,588 INFO L290 TraceCheckUtils]: 95: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,588 INFO L290 TraceCheckUtils]: 96: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,588 INFO L290 TraceCheckUtils]: 97: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,589 INFO L272 TraceCheckUtils]: 98: Hoare triple {34938#(<= 1 ~waterLevel~0)} call processEnvironment__before__methaneAlarm(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,589 INFO L290 TraceCheckUtils]: 99: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:42,589 INFO L272 TraceCheckUtils]: 100: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:11:42,589 INFO L290 TraceCheckUtils]: 101: Hoare triple {34976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:42,589 INFO L290 TraceCheckUtils]: 102: Hoare triple {34882#true} assume !(0 == ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:42,589 INFO L272 TraceCheckUtils]: 103: Hoare triple {34882#true} call processEnvironment__before__highWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L290 TraceCheckUtils]: 104: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {34882#true} {34882#true} #333#return; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L290 TraceCheckUtils]: 106: Hoare triple {34882#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L290 TraceCheckUtils]: 107: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {34882#true} {34882#true} #379#return; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L290 TraceCheckUtils]: 109: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:42,590 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {34882#true} {34938#(<= 1 ~waterLevel~0)} #345#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,591 INFO L290 TraceCheckUtils]: 111: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:42,591 INFO L290 TraceCheckUtils]: 112: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:42,592 INFO L290 TraceCheckUtils]: 113: Hoare triple {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:42,592 INFO L290 TraceCheckUtils]: 114: Hoare triple {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {34883#false} is VALID [2022-02-20 18:11:42,592 INFO L290 TraceCheckUtils]: 115: Hoare triple {34883#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {34883#false} is VALID [2022-02-20 18:11:42,592 INFO L290 TraceCheckUtils]: 116: Hoare triple {34883#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {34883#false} is VALID [2022-02-20 18:11:42,592 INFO L290 TraceCheckUtils]: 117: Hoare triple {34883#false} assume !false; {34883#false} is VALID [2022-02-20 18:11:42,593 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 13 proven. 10 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-02-20 18:11:42,593 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:42,593 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564736048] [2022-02-20 18:11:42,593 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564736048] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:11:42,593 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [745841780] [2022-02-20 18:11:42,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:42,593 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:11:42,594 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:42,608 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:11:42,652 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:11:42,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,753 INFO L263 TraceCheckSpWp]: Trace formula consists of 568 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:11:42,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:42,777 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:43,083 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {34882#true} is VALID [2022-02-20 18:11:43,083 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34882#true} is VALID [2022-02-20 18:11:43,083 INFO L290 TraceCheckUtils]: 2: Hoare triple {34882#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34882#true} is VALID [2022-02-20 18:11:43,083 INFO L272 TraceCheckUtils]: 3: Hoare triple {34882#true} call select_features_#t~ret55#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,083 INFO L290 TraceCheckUtils]: 4: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L290 TraceCheckUtils]: 5: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34882#true} {34882#true} #351#return; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L290 TraceCheckUtils]: 7: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L272 TraceCheckUtils]: 8: Hoare triple {34882#true} call select_features_#t~ret56#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L290 TraceCheckUtils]: 9: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L290 TraceCheckUtils]: 10: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,084 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34882#true} {34882#true} #353#return; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 12: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L272 TraceCheckUtils]: 13: Hoare triple {34882#true} call select_features_#t~ret57#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 14: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 15: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34882#true} {34882#true} #355#return; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 17: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L272 TraceCheckUtils]: 18: Hoare triple {34882#true} call select_features_#t~ret58#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 19: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,085 INFO L290 TraceCheckUtils]: 20: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34882#true} {34882#true} #357#return; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L290 TraceCheckUtils]: 22: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L272 TraceCheckUtils]: 23: Hoare triple {34882#true} call select_features_#t~ret59#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L290 TraceCheckUtils]: 24: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L290 TraceCheckUtils]: 25: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34882#true} {34882#true} #359#return; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L290 TraceCheckUtils]: 27: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34882#true} is VALID [2022-02-20 18:11:43,086 INFO L272 TraceCheckUtils]: 28: Hoare triple {34882#true} call select_features_#t~ret60#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 29: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 30: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34882#true} {34882#true} #361#return; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 32: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 33: Hoare triple {34882#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 34: Hoare triple {34882#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {34882#true} is VALID [2022-02-20 18:11:43,087 INFO L290 TraceCheckUtils]: 35: Hoare triple {34882#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 36: Hoare triple {34882#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 37: Hoare triple {34882#true} assume !false; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 38: Hoare triple {34882#true} assume test_~splverifierCounter~0#1 < 4; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 39: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 40: Hoare triple {34882#true} assume 0 != test_~tmp~8#1; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L272 TraceCheckUtils]: 41: Hoare triple {34882#true} call waterRise(); {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 42: Hoare triple {34882#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34882#true} is VALID [2022-02-20 18:11:43,088 INFO L290 TraceCheckUtils]: 43: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {34882#true} {34882#true} #363#return; {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 45: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 46: Hoare triple {34882#true} assume !(0 != test_~tmp___0~3#1); {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 47: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 48: Hoare triple {34882#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 49: Hoare triple {34882#true} assume !(0 != test_~tmp___1~0#1); {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L272 TraceCheckUtils]: 50: Hoare triple {34882#true} call timeShift(); {34882#true} is VALID [2022-02-20 18:11:43,089 INFO L290 TraceCheckUtils]: 51: Hoare triple {34882#true} assume !(0 != ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L290 TraceCheckUtils]: 52: Hoare triple {34882#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L290 TraceCheckUtils]: 53: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L272 TraceCheckUtils]: 54: Hoare triple {34882#true} call processEnvironment__before__methaneAlarm(); {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L290 TraceCheckUtils]: 55: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L272 TraceCheckUtils]: 56: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L290 TraceCheckUtils]: 57: Hoare triple {34882#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:43,090 INFO L290 TraceCheckUtils]: 58: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:43,091 INFO L290 TraceCheckUtils]: 59: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,091 INFO L290 TraceCheckUtils]: 60: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,092 INFO L290 TraceCheckUtils]: 61: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,092 INFO L290 TraceCheckUtils]: 62: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,092 INFO L290 TraceCheckUtils]: 63: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,092 INFO L290 TraceCheckUtils]: 64: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,093 INFO L290 TraceCheckUtils]: 65: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,093 INFO L272 TraceCheckUtils]: 66: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,093 INFO L290 TraceCheckUtils]: 67: Hoare triple {34937#(<= 2 ~waterLevel~0)} ~pumpRunning~0 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,094 INFO L290 TraceCheckUtils]: 68: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,094 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,094 INFO L290 TraceCheckUtils]: 70: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,094 INFO L290 TraceCheckUtils]: 71: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,095 INFO L290 TraceCheckUtils]: 72: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,095 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,095 INFO L290 TraceCheckUtils]: 74: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,096 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #345#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,096 INFO L290 TraceCheckUtils]: 76: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,096 INFO L290 TraceCheckUtils]: 77: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,096 INFO L290 TraceCheckUtils]: 78: Hoare triple {34937#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,097 INFO L290 TraceCheckUtils]: 79: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,097 INFO L290 TraceCheckUtils]: 80: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,097 INFO L290 TraceCheckUtils]: 81: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,098 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #369#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,098 INFO L290 TraceCheckUtils]: 83: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !false; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,098 INFO L290 TraceCheckUtils]: 84: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,098 INFO L290 TraceCheckUtils]: 85: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,099 INFO L290 TraceCheckUtils]: 86: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~8#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,099 INFO L290 TraceCheckUtils]: 87: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,099 INFO L290 TraceCheckUtils]: 88: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,099 INFO L290 TraceCheckUtils]: 89: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,100 INFO L290 TraceCheckUtils]: 90: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,100 INFO L290 TraceCheckUtils]: 91: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___1~0#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,100 INFO L272 TraceCheckUtils]: 92: Hoare triple {34937#(<= 2 ~waterLevel~0)} call timeShift(); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,101 INFO L290 TraceCheckUtils]: 93: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,101 INFO L290 TraceCheckUtils]: 94: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,101 INFO L290 TraceCheckUtils]: 95: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,102 INFO L290 TraceCheckUtils]: 96: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,102 INFO L290 TraceCheckUtils]: 97: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,102 INFO L272 TraceCheckUtils]: 98: Hoare triple {34938#(<= 1 ~waterLevel~0)} call processEnvironment__before__methaneAlarm(); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,102 INFO L290 TraceCheckUtils]: 99: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,103 INFO L272 TraceCheckUtils]: 100: Hoare triple {34938#(<= 1 ~waterLevel~0)} call processEnvironment__before__lowWaterSensor(); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,103 INFO L290 TraceCheckUtils]: 101: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,103 INFO L290 TraceCheckUtils]: 102: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,104 INFO L272 TraceCheckUtils]: 103: Hoare triple {34938#(<= 1 ~waterLevel~0)} call processEnvironment__before__highWaterSensor(); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,104 INFO L290 TraceCheckUtils]: 104: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,104 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {34938#(<= 1 ~waterLevel~0)} {34938#(<= 1 ~waterLevel~0)} #333#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,104 INFO L290 TraceCheckUtils]: 106: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,105 INFO L290 TraceCheckUtils]: 107: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,105 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {34938#(<= 1 ~waterLevel~0)} {34938#(<= 1 ~waterLevel~0)} #379#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,105 INFO L290 TraceCheckUtils]: 109: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,106 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {34938#(<= 1 ~waterLevel~0)} {34938#(<= 1 ~waterLevel~0)} #345#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,106 INFO L290 TraceCheckUtils]: 111: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,106 INFO L290 TraceCheckUtils]: 112: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:43,107 INFO L290 TraceCheckUtils]: 113: Hoare triple {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:43,107 INFO L290 TraceCheckUtils]: 114: Hoare triple {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {34883#false} is VALID [2022-02-20 18:11:43,107 INFO L290 TraceCheckUtils]: 115: Hoare triple {34883#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {34883#false} is VALID [2022-02-20 18:11:43,107 INFO L290 TraceCheckUtils]: 116: Hoare triple {34883#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {34883#false} is VALID [2022-02-20 18:11:43,107 INFO L290 TraceCheckUtils]: 117: Hoare triple {34883#false} assume !false; {34883#false} is VALID [2022-02-20 18:11:43,108 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:43,108 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:11:43,466 INFO L290 TraceCheckUtils]: 117: Hoare triple {34883#false} assume !false; {34883#false} is VALID [2022-02-20 18:11:43,467 INFO L290 TraceCheckUtils]: 116: Hoare triple {34883#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {34883#false} is VALID [2022-02-20 18:11:43,467 INFO L290 TraceCheckUtils]: 115: Hoare triple {34883#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret6#1 && __utac_acc__Specification4_spec__1_#t~ret6#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {34883#false} is VALID [2022-02-20 18:11:43,467 INFO L290 TraceCheckUtils]: 114: Hoare triple {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {34883#false} is VALID [2022-02-20 18:11:43,468 INFO L290 TraceCheckUtils]: 113: Hoare triple {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34952#(<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)} is VALID [2022-02-20 18:11:43,468 INFO L290 TraceCheckUtils]: 112: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34951#(<= 1 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:11:43,468 INFO L290 TraceCheckUtils]: 111: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,469 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {34882#true} {34938#(<= 1 ~waterLevel~0)} #345#return; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 109: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {34882#true} {34882#true} #379#return; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 107: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 106: Hoare triple {34882#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {34882#true} {34882#true} #333#return; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 104: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L272 TraceCheckUtils]: 103: Hoare triple {34882#true} call processEnvironment__before__highWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 102: Hoare triple {34882#true} assume !(0 == ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 101: Hoare triple {34882#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L272 TraceCheckUtils]: 100: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L290 TraceCheckUtils]: 99: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:43,469 INFO L272 TraceCheckUtils]: 98: Hoare triple {34938#(<= 1 ~waterLevel~0)} call processEnvironment__before__methaneAlarm(); {34882#true} is VALID [2022-02-20 18:11:43,470 INFO L290 TraceCheckUtils]: 97: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,470 INFO L290 TraceCheckUtils]: 96: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,470 INFO L290 TraceCheckUtils]: 95: Hoare triple {34938#(<= 1 ~waterLevel~0)} assume { :end_inline_lowerWaterLevel } true; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,471 INFO L290 TraceCheckUtils]: 94: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34938#(<= 1 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,471 INFO L290 TraceCheckUtils]: 93: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,471 INFO L272 TraceCheckUtils]: 92: Hoare triple {34937#(<= 2 ~waterLevel~0)} call timeShift(); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,472 INFO L290 TraceCheckUtils]: 91: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___1~0#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,472 INFO L290 TraceCheckUtils]: 90: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,472 INFO L290 TraceCheckUtils]: 89: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,472 INFO L290 TraceCheckUtils]: 88: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,473 INFO L290 TraceCheckUtils]: 87: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,473 INFO L290 TraceCheckUtils]: 86: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~8#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,473 INFO L290 TraceCheckUtils]: 85: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,473 INFO L290 TraceCheckUtils]: 84: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,474 INFO L290 TraceCheckUtils]: 83: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !false; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,474 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #369#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,474 INFO L290 TraceCheckUtils]: 81: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,474 INFO L290 TraceCheckUtils]: 80: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,475 INFO L290 TraceCheckUtils]: 79: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~1#1); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,475 INFO L290 TraceCheckUtils]: 78: Hoare triple {34937#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret5#1 && __utac_acc__Specification4_spec__1_#t~ret5#1 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,475 INFO L290 TraceCheckUtils]: 77: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,475 INFO L290 TraceCheckUtils]: 76: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,476 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #345#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,476 INFO L290 TraceCheckUtils]: 74: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,476 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {34937#(<= 2 ~waterLevel~0)} {34882#true} #379#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,477 INFO L290 TraceCheckUtils]: 72: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,477 INFO L290 TraceCheckUtils]: 71: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,477 INFO L290 TraceCheckUtils]: 70: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,477 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {34882#true} {34937#(<= 2 ~waterLevel~0)} #329#return; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,477 INFO L290 TraceCheckUtils]: 68: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,477 INFO L290 TraceCheckUtils]: 67: Hoare triple {34882#true} ~pumpRunning~0 := 1; {34882#true} is VALID [2022-02-20 18:11:43,478 INFO L272 TraceCheckUtils]: 66: Hoare triple {34937#(<= 2 ~waterLevel~0)} call activatePump__before__methaneQuery(); {34882#true} is VALID [2022-02-20 18:11:43,478 INFO L290 TraceCheckUtils]: 65: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != ~__SELECTED_FEATURE_methaneQuery~0); {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,478 INFO L290 TraceCheckUtils]: 64: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,478 INFO L290 TraceCheckUtils]: 63: Hoare triple {34937#(<= 2 ~waterLevel~0)} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment__role__highWaterSensor_#t~ret7#1 && processEnvironment__role__highWaterSensor_#t~ret7#1 <= 2147483647;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,479 INFO L290 TraceCheckUtils]: 62: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,479 INFO L290 TraceCheckUtils]: 61: Hoare triple {34937#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,479 INFO L290 TraceCheckUtils]: 60: Hoare triple {34937#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret20#1 && isHighWaterLevel_#t~ret20#1 <= 2147483647;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 59: Hoare triple {34882#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~10#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {34937#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 58: Hoare triple {34882#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 57: Hoare triple {34882#true} assume 0 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L272 TraceCheckUtils]: 56: Hoare triple {34882#true} call processEnvironment__before__lowWaterSensor(); {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 55: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_lowWaterSensor~0); {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L272 TraceCheckUtils]: 54: Hoare triple {34882#true} call processEnvironment__before__methaneAlarm(); {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 53: Hoare triple {34882#true} assume !(0 != ~__SELECTED_FEATURE_methaneAlarm~0); {34882#true} is VALID [2022-02-20 18:11:43,480 INFO L290 TraceCheckUtils]: 52: Hoare triple {34882#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 51: Hoare triple {34882#true} assume !(0 != ~pumpRunning~0); {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L272 TraceCheckUtils]: 50: Hoare triple {34882#true} call timeShift(); {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 49: Hoare triple {34882#true} assume !(0 != test_~tmp___1~0#1); {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 48: Hoare triple {34882#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 47: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet24#1 && test_#t~nondet24#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 46: Hoare triple {34882#true} assume !(0 != test_~tmp___0~3#1); {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L290 TraceCheckUtils]: 45: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet23#1 && test_#t~nondet23#1 <= 2147483647;test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {34882#true} is VALID [2022-02-20 18:11:43,481 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {34882#true} {34882#true} #363#return; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 43: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 42: Hoare triple {34882#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L272 TraceCheckUtils]: 41: Hoare triple {34882#true} call waterRise(); {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 40: Hoare triple {34882#true} assume 0 != test_~tmp~8#1; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 39: Hoare triple {34882#true} assume -2147483648 <= test_#t~nondet22#1 && test_#t~nondet22#1 <= 2147483647;test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 38: Hoare triple {34882#true} assume test_~splverifierCounter~0#1 < 4; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 37: Hoare triple {34882#true} assume !false; {34882#true} is VALID [2022-02-20 18:11:43,482 INFO L290 TraceCheckUtils]: 36: Hoare triple {34882#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 35: Hoare triple {34882#true} assume 0 != main_~tmp~0#1;assume { :begin_inline_setup } true; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 34: Hoare triple {34882#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret4#1 && main_#t~ret4#1 <= 2147483647;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 33: Hoare triple {34882#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 32: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret60#1 && select_features_#t~ret60#1 <= 2147483647;~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {34882#true} {34882#true} #361#return; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 30: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L290 TraceCheckUtils]: 29: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,483 INFO L272 TraceCheckUtils]: 28: Hoare triple {34882#true} call select_features_#t~ret60#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L290 TraceCheckUtils]: 27: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret59#1 && select_features_#t~ret59#1 <= 2147483647;~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {34882#true} {34882#true} #359#return; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L290 TraceCheckUtils]: 25: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L290 TraceCheckUtils]: 24: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L272 TraceCheckUtils]: 23: Hoare triple {34882#true} call select_features_#t~ret59#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L290 TraceCheckUtils]: 22: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret58#1 && select_features_#t~ret58#1 <= 2147483647;~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {34882#true} {34882#true} #357#return; {34882#true} is VALID [2022-02-20 18:11:43,484 INFO L290 TraceCheckUtils]: 20: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L290 TraceCheckUtils]: 19: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L272 TraceCheckUtils]: 18: Hoare triple {34882#true} call select_features_#t~ret58#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L290 TraceCheckUtils]: 17: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret57#1 && select_features_#t~ret57#1 <= 2147483647;~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {34882#true} {34882#true} #355#return; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L290 TraceCheckUtils]: 15: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L290 TraceCheckUtils]: 14: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L272 TraceCheckUtils]: 13: Hoare triple {34882#true} call select_features_#t~ret57#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,485 INFO L290 TraceCheckUtils]: 12: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret56#1 && select_features_#t~ret56#1 <= 2147483647;~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {34882#true} {34882#true} #353#return; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L290 TraceCheckUtils]: 10: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L290 TraceCheckUtils]: 9: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L272 TraceCheckUtils]: 8: Hoare triple {34882#true} call select_features_#t~ret56#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L290 TraceCheckUtils]: 7: Hoare triple {34882#true} assume -2147483648 <= select_features_#t~ret55#1 && select_features_#t~ret55#1 <= 2147483647;~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {34882#true} {34882#true} #351#return; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L290 TraceCheckUtils]: 5: Hoare triple {34882#true} assume true; {34882#true} is VALID [2022-02-20 18:11:43,486 INFO L290 TraceCheckUtils]: 4: Hoare triple {34882#true} havoc ~retValue_acc~12;assume -2147483648 <= #t~nondet54 && #t~nondet54 <= 2147483647;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {34882#true} is VALID [2022-02-20 18:11:43,487 INFO L272 TraceCheckUtils]: 3: Hoare triple {34882#true} call select_features_#t~ret55#1 := select_one(); {34882#true} is VALID [2022-02-20 18:11:43,487 INFO L290 TraceCheckUtils]: 2: Hoare triple {34882#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1; {34882#true} is VALID [2022-02-20 18:11:43,487 INFO L290 TraceCheckUtils]: 1: Hoare triple {34882#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1; {34882#true} is VALID [2022-02-20 18:11:43,487 INFO L290 TraceCheckUtils]: 0: Hoare triple {34882#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(38, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~cleanupTimeShifts~0 := 4;~__SELECTED_FEATURE_base~0 := 0;~__SELECTED_FEATURE_highWaterSensor~0 := 0;~__SELECTED_FEATURE_lowWaterSensor~0 := 0;~__SELECTED_FEATURE_methaneQuery~0 := 0;~__SELECTED_FEATURE_methaneAlarm~0 := 0;~__SELECTED_FEATURE_stopCommand~0 := 0;~__SELECTED_FEATURE_startCommand~0 := 0;~__GUIDSL_ROOT_PRODUCTION~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {34882#true} is VALID [2022-02-20 18:11:43,487 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 14 proven. 9 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-02-20 18:11:43,488 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [745841780] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:11:43,488 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:11:43,488 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-02-20 18:11:43,488 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462397682] [2022-02-20 18:11:43,488 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:11:43,489 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 118 [2022-02-20 18:11:43,493 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:43,503 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-02-20 18:11:43,576 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 133 edges. 133 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:43,576 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-20 18:11:43,576 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:43,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-20 18:11:43,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:43,577 INFO L87 Difference]: Start difference. First operand 1211 states and 1693 transitions. Second operand has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-02-20 18:11:46,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:46,020 INFO L93 Difference]: Finished difference Result 2602 states and 3775 transitions. [2022-02-20 18:11:46,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-02-20 18:11:46,021 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) Word has length 118 [2022-02-20 18:11:46,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:46,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-02-20 18:11:46,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 673 transitions. [2022-02-20 18:11:46,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-02-20 18:11:46,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 673 transitions. [2022-02-20 18:11:46,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 27 states and 673 transitions. [2022-02-20 18:11:46,513 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 673 edges. 673 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:46,651 INFO L225 Difference]: With dead ends: 2602 [2022-02-20 18:11:46,651 INFO L226 Difference]: Without dead ends: 1669 [2022-02-20 18:11:46,656 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 298 GetRequests, 266 SyntacticMatches, 5 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 201 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-02-20 18:11:46,656 INFO L933 BasicCegarLoop]: 200 mSDtfsCounter, 522 mSDsluCounter, 512 mSDsCounter, 0 mSdLazyCounter, 797 mSolverCounterSat, 282 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 536 SdHoareTripleChecker+Valid, 712 SdHoareTripleChecker+Invalid, 1079 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 282 IncrementalHoareTripleChecker+Valid, 797 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:46,656 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [536 Valid, 712 Invalid, 1079 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [282 Valid, 797 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-02-20 18:11:46,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1669 states. [2022-02-20 18:11:46,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1669 to 1392. [2022-02-20 18:11:46,906 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:46,910 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1669 states. Second operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) [2022-02-20 18:11:46,912 INFO L74 IsIncluded]: Start isIncluded. First operand 1669 states. Second operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) [2022-02-20 18:11:46,914 INFO L87 Difference]: Start difference. First operand 1669 states. Second operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) [2022-02-20 18:11:47,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:47,019 INFO L93 Difference]: Finished difference Result 1669 states and 2360 transitions. [2022-02-20 18:11:47,019 INFO L276 IsEmpty]: Start isEmpty. Operand 1669 states and 2360 transitions. [2022-02-20 18:11:47,024 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:47,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:47,028 INFO L74 IsIncluded]: Start isIncluded. First operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) Second operand 1669 states. [2022-02-20 18:11:47,030 INFO L87 Difference]: Start difference. First operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) Second operand 1669 states. [2022-02-20 18:11:47,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:47,129 INFO L93 Difference]: Finished difference Result 1669 states and 2360 transitions. [2022-02-20 18:11:47,129 INFO L276 IsEmpty]: Start isEmpty. Operand 1669 states and 2360 transitions. [2022-02-20 18:11:47,134 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:47,135 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:47,135 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:47,135 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:47,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1392 states, 1047 states have (on average 1.276981852913085) internal successors, (1337), 1152 states have internal predecessors, (1337), 193 states have call successors, (193), 134 states have call predecessors, (193), 151 states have return successors, (415), 198 states have call predecessors, (415), 193 states have call successors, (415) [2022-02-20 18:11:47,253 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1392 states to 1392 states and 1945 transitions. [2022-02-20 18:11:47,253 INFO L78 Accepts]: Start accepts. Automaton has 1392 states and 1945 transitions. Word has length 118 [2022-02-20 18:11:47,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:47,254 INFO L470 AbstractCegarLoop]: Abstraction has 1392 states and 1945 transitions. [2022-02-20 18:11:47,254 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 10.11111111111111) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (24), 6 states have call predecessors, (24), 3 states have return successors, (18), 3 states have call predecessors, (18), 3 states have call successors, (18) [2022-02-20 18:11:47,254 INFO L276 IsEmpty]: Start isEmpty. Operand 1392 states and 1945 transitions. [2022-02-20 18:11:47,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-02-20 18:11:47,259 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:47,259 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:47,281 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:47,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:11:47,480 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:47,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:47,480 INFO L85 PathProgramCache]: Analyzing trace with hash 1512307827, now seen corresponding path program 2 times [2022-02-20 18:11:47,480 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:47,480 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053308781] [2022-02-20 18:11:47,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:47,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:47,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:11:47,545 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:11:47,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:11:47,611 INFO L138 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-02-20 18:11:47,611 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:11:47,612 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:11:47,614 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-02-20 18:11:47,616 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:47,618 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:11:47,677 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret55 := select_one(); [2022-02-20 18:11:47,678 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:11:47,681 INFO L158 Benchmark]: Toolchain (without parser) took 20733.19ms. Allocated memory was 77.6MB in the beginning and 339.7MB in the end (delta: 262.1MB). Free memory was 42.8MB in the beginning and 227.0MB in the end (delta: -184.2MB). Peak memory consumption was 78.7MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,682 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 55.8MB in the beginning and 55.8MB in the end (delta: 26.2kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:11:47,682 INFO L158 Benchmark]: CACSL2BoogieTranslator took 368.36ms. Allocated memory was 77.6MB in the beginning and 94.4MB in the end (delta: 16.8MB). Free memory was 42.6MB in the beginning and 56.9MB in the end (delta: -14.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,682 INFO L158 Benchmark]: Boogie Procedure Inliner took 53.73ms. Allocated memory is still 94.4MB. Free memory was 56.9MB in the beginning and 53.7MB in the end (delta: 3.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,682 INFO L158 Benchmark]: Boogie Preprocessor took 31.27ms. Allocated memory is still 94.4MB. Free memory was 53.7MB in the beginning and 51.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,683 INFO L158 Benchmark]: RCFGBuilder took 610.73ms. Allocated memory is still 94.4MB. Free memory was 51.6MB in the beginning and 58.6MB in the end (delta: -7.0MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,683 INFO L158 Benchmark]: TraceAbstraction took 19653.25ms. Allocated memory was 94.4MB in the beginning and 339.7MB in the end (delta: 245.4MB). Free memory was 58.1MB in the beginning and 227.0MB in the end (delta: -168.9MB). Peak memory consumption was 75.9MB. Max. memory is 16.1GB. [2022-02-20 18:11:47,685 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 77.6MB. Free memory was 55.8MB in the beginning and 55.8MB in the end (delta: 26.2kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 368.36ms. Allocated memory was 77.6MB in the beginning and 94.4MB in the end (delta: 16.8MB). Free memory was 42.6MB in the beginning and 56.9MB in the end (delta: -14.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 53.73ms. Allocated memory is still 94.4MB. Free memory was 56.9MB in the beginning and 53.7MB in the end (delta: 3.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.27ms. Allocated memory is still 94.4MB. Free memory was 53.7MB in the beginning and 51.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 610.73ms. Allocated memory is still 94.4MB. Free memory was 51.6MB in the beginning and 58.6MB in the end (delta: -7.0MB). Peak memory consumption was 19.6MB. Max. memory is 16.1GB. * TraceAbstraction took 19653.25ms. Allocated memory was 94.4MB in the beginning and 339.7MB in the end (delta: 245.4MB). Free memory was 58.1MB in the beginning and 227.0MB in the end (delta: -168.9MB). Peak memory consumption was 75.9MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:11:47,714 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 45558e1c10008e5b16efe572a84fcf92b08797f54d586c51d45827b7e38254a6 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:49,697 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:49,699 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:49,746 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:49,747 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:49,750 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:49,751 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:49,755 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:49,758 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:49,763 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:49,764 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:49,765 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:49,765 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:49,767 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:49,768 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:49,774 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:49,774 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:49,775 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:49,776 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:49,779 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:49,781 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:49,782 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:49,783 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:49,785 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:49,788 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:49,788 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:49,789 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:49,790 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:49,790 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:49,791 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:49,791 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:49,792 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:49,793 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:49,793 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:49,794 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:49,795 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:49,795 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:49,795 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:49,796 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:49,797 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:49,798 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:49,798 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Bitvector.epf [2022-02-20 18:11:49,827 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:49,827 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:49,828 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:49,828 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:49,829 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:49,829 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:49,830 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:49,830 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:49,830 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:49,830 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:49,831 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:49,831 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:49,831 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:49,831 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:49,832 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:49,833 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:49,833 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:49,833 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:49,833 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:49,833 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:49,833 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:49,834 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:49,834 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:49,834 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:49,834 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-02-20 18:11:49,834 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-02-20 18:11:49,834 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:49,835 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:49,835 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:49,835 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-02-20 18:11:49,835 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 45558e1c10008e5b16efe572a84fcf92b08797f54d586c51d45827b7e38254a6 [2022-02-20 18:11:50,099 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:50,125 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:50,127 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:50,128 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:50,128 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:50,129 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:50,178 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ced599bf/af58089b0bad4b51a59388caba1d8176/FLAG64b38155f [2022-02-20 18:11:50,595 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:50,598 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:50,613 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ced599bf/af58089b0bad4b51a59388caba1d8176/FLAG64b38155f [2022-02-20 18:11:50,625 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ced599bf/af58089b0bad4b51a59388caba1d8176 [2022-02-20 18:11:50,627 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:50,628 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:50,630 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:50,630 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:50,632 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:50,633 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:50" (1/1) ... [2022-02-20 18:11:50,634 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5d51bec4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:50, skipping insertion in model container [2022-02-20 18:11:50,635 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:50" (1/1) ... [2022-02-20 18:11:50,640 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:50,684 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:50,951 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c[9333,9346] [2022-02-20 18:11:51,090 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:51,118 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-02-20 18:11:51,143 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:51,195 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c[9333,9346] [2022-02-20 18:11:51,247 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:51,254 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:51,273 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_productSimulator.cil.c[9333,9346] [2022-02-20 18:11:51,291 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:51,311 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:51,312 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51 WrapperNode [2022-02-20 18:11:51,312 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:51,313 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:51,313 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:51,313 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:51,317 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,343 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,377 INFO L137 Inliner]: procedures = 65, calls = 177, calls flagged for inlining = 29, calls inlined = 26, statements flattened = 331 [2022-02-20 18:11:51,377 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:51,377 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:51,378 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:51,378 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:51,384 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,385 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,397 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,397 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,402 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,406 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,420 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,422 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:51,423 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:51,423 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:51,423 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:51,423 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (1/1) ... [2022-02-20 18:11:51,429 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:51,436 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:51,481 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:51,500 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:51,571 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:51,571 INFO L130 BoogieDeclarations]: Found specification of procedure activatePump__before__methaneQuery [2022-02-20 18:11:51,571 INFO L138 BoogieDeclarations]: Found implementation of procedure activatePump__before__methaneQuery [2022-02-20 18:11:51,571 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:51,572 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:51,572 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:51,572 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:51,572 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:11:51,572 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__highWaterSensor [2022-02-20 18:11:51,572 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:51,572 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:51,572 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:11:51,573 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__methaneAlarm [2022-02-20 18:11:51,573 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-02-20 18:11:51,573 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:11:51,573 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__before__lowWaterSensor [2022-02-20 18:11:51,573 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-02-20 18:11:51,573 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-02-20 18:11:51,573 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:11:51,573 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:11:51,574 INFO L130 BoogieDeclarations]: Found specification of procedure select_one [2022-02-20 18:11:51,574 INFO L138 BoogieDeclarations]: Found implementation of procedure select_one [2022-02-20 18:11:51,574 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:51,574 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:51,574 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:51,574 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:51,631 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:51,633 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:51,966 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:51,971 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:51,971 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:51,973 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:51 BoogieIcfgContainer [2022-02-20 18:11:51,973 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:51,974 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:51,974 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:51,976 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:51,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:50" (1/3) ... [2022-02-20 18:11:51,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3abdf97b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:51, skipping insertion in model container [2022-02-20 18:11:51,976 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:51" (2/3) ... [2022-02-20 18:11:51,976 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3abdf97b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:51, skipping insertion in model container [2022-02-20 18:11:51,977 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:51" (3/3) ... [2022-02-20 18:11:51,977 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec4_productSimulator.cil.c [2022-02-20 18:11:51,985 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:51,985 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:52,025 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:52,031 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:52,031 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:52,053 INFO L276 IsEmpty]: Start isEmpty. Operand has 138 states, 97 states have (on average 1.3711340206185567) internal successors, (133), 113 states have internal predecessors, (133), 28 states have call successors, (28), 11 states have call predecessors, (28), 11 states have return successors, (28), 23 states have call predecessors, (28), 28 states have call successors, (28) [2022-02-20 18:11:52,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-20 18:11:52,062 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:52,062 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:52,063 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:52,067 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:52,067 INFO L85 PathProgramCache]: Analyzing trace with hash 1286926384, now seen corresponding path program 1 times [2022-02-20 18:11:52,076 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:52,076 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [119749976] [2022-02-20 18:11:52,076 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:52,077 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:52,077 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:52,084 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:52,116 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-02-20 18:11:52,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:52,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 206 conjuncts, 1 conjunts are in the unsatisfiable core [2022-02-20 18:11:52,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:52,279 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:52,432 INFO L290 TraceCheckUtils]: 0: Hoare triple {141#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {141#true} is VALID [2022-02-20 18:11:52,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {141#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {141#true} is VALID [2022-02-20 18:11:52,432 INFO L290 TraceCheckUtils]: 2: Hoare triple {141#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {141#true} is VALID [2022-02-20 18:11:52,433 INFO L272 TraceCheckUtils]: 3: Hoare triple {141#true} call select_features_#t~ret55#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,433 INFO L290 TraceCheckUtils]: 4: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,433 INFO L290 TraceCheckUtils]: 5: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,433 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {141#true} {141#true} #351#return; {141#true} is VALID [2022-02-20 18:11:52,434 INFO L290 TraceCheckUtils]: 7: Hoare triple {141#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {141#true} is VALID [2022-02-20 18:11:52,434 INFO L272 TraceCheckUtils]: 8: Hoare triple {141#true} call select_features_#t~ret56#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,434 INFO L290 TraceCheckUtils]: 9: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,434 INFO L290 TraceCheckUtils]: 10: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,434 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {141#true} {141#true} #353#return; {141#true} is VALID [2022-02-20 18:11:52,435 INFO L290 TraceCheckUtils]: 12: Hoare triple {141#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {141#true} is VALID [2022-02-20 18:11:52,435 INFO L272 TraceCheckUtils]: 13: Hoare triple {141#true} call select_features_#t~ret57#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,435 INFO L290 TraceCheckUtils]: 14: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,435 INFO L290 TraceCheckUtils]: 15: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,435 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {141#true} {141#true} #355#return; {141#true} is VALID [2022-02-20 18:11:52,436 INFO L290 TraceCheckUtils]: 17: Hoare triple {141#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {141#true} is VALID [2022-02-20 18:11:52,436 INFO L272 TraceCheckUtils]: 18: Hoare triple {141#true} call select_features_#t~ret58#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,436 INFO L290 TraceCheckUtils]: 19: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,436 INFO L290 TraceCheckUtils]: 20: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,436 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {141#true} {141#true} #357#return; {141#true} is VALID [2022-02-20 18:11:52,437 INFO L290 TraceCheckUtils]: 22: Hoare triple {141#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {141#true} is VALID [2022-02-20 18:11:52,437 INFO L272 TraceCheckUtils]: 23: Hoare triple {141#true} call select_features_#t~ret59#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,437 INFO L290 TraceCheckUtils]: 24: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,437 INFO L290 TraceCheckUtils]: 25: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,437 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {141#true} {141#true} #359#return; {141#true} is VALID [2022-02-20 18:11:52,438 INFO L290 TraceCheckUtils]: 27: Hoare triple {141#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {141#true} is VALID [2022-02-20 18:11:52,438 INFO L272 TraceCheckUtils]: 28: Hoare triple {141#true} call select_features_#t~ret60#1 := select_one(); {141#true} is VALID [2022-02-20 18:11:52,438 INFO L290 TraceCheckUtils]: 29: Hoare triple {141#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {141#true} is VALID [2022-02-20 18:11:52,438 INFO L290 TraceCheckUtils]: 30: Hoare triple {141#true} assume true; {141#true} is VALID [2022-02-20 18:11:52,438 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {141#true} {141#true} #361#return; {141#true} is VALID [2022-02-20 18:11:52,439 INFO L290 TraceCheckUtils]: 32: Hoare triple {141#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {141#true} is VALID [2022-02-20 18:11:52,439 INFO L290 TraceCheckUtils]: 33: Hoare triple {141#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {141#true} is VALID [2022-02-20 18:11:52,439 INFO L290 TraceCheckUtils]: 34: Hoare triple {141#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {141#true} is VALID [2022-02-20 18:11:52,439 INFO L290 TraceCheckUtils]: 35: Hoare triple {141#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {141#true} is VALID [2022-02-20 18:11:52,439 INFO L290 TraceCheckUtils]: 36: Hoare triple {141#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {141#true} is VALID [2022-02-20 18:11:52,440 INFO L290 TraceCheckUtils]: 37: Hoare triple {141#true} assume !true; {142#false} is VALID [2022-02-20 18:11:52,440 INFO L272 TraceCheckUtils]: 38: Hoare triple {142#false} call cleanup(); {142#false} is VALID [2022-02-20 18:11:52,441 INFO L290 TraceCheckUtils]: 39: Hoare triple {142#false} havoc ~i~0;havoc ~__cil_tmp2~0; {142#false} is VALID [2022-02-20 18:11:52,441 INFO L272 TraceCheckUtils]: 40: Hoare triple {142#false} call timeShift(); {142#false} is VALID [2022-02-20 18:11:52,441 INFO L290 TraceCheckUtils]: 41: Hoare triple {142#false} assume !(0bv32 != ~pumpRunning~0); {142#false} is VALID [2022-02-20 18:11:52,441 INFO L290 TraceCheckUtils]: 42: Hoare triple {142#false} assume !(0bv32 != ~systemActive~0); {142#false} is VALID [2022-02-20 18:11:52,441 INFO L290 TraceCheckUtils]: 43: Hoare triple {142#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {142#false} is VALID [2022-02-20 18:11:52,442 INFO L290 TraceCheckUtils]: 44: Hoare triple {142#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {142#false} is VALID [2022-02-20 18:11:52,442 INFO L290 TraceCheckUtils]: 45: Hoare triple {142#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {142#false} is VALID [2022-02-20 18:11:52,442 INFO L290 TraceCheckUtils]: 46: Hoare triple {142#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {142#false} is VALID [2022-02-20 18:11:52,442 INFO L290 TraceCheckUtils]: 47: Hoare triple {142#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {142#false} is VALID [2022-02-20 18:11:52,442 INFO L290 TraceCheckUtils]: 48: Hoare triple {142#false} assume !false; {142#false} is VALID [2022-02-20 18:11:52,443 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:52,443 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:52,444 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:52,444 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [119749976] [2022-02-20 18:11:52,445 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [119749976] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:52,445 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:52,445 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:52,446 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737154127] [2022-02-20 18:11:52,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:52,450 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 49 [2022-02-20 18:11:52,451 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:52,453 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:52,488 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 39 edges. 39 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:52,489 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:52,489 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:52,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:52,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:52,505 INFO L87 Difference]: Start difference. First operand has 138 states, 97 states have (on average 1.3711340206185567) internal successors, (133), 113 states have internal predecessors, (133), 28 states have call successors, (28), 11 states have call predecessors, (28), 11 states have return successors, (28), 23 states have call predecessors, (28), 28 states have call successors, (28) Second operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:52,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:52,622 INFO L93 Difference]: Finished difference Result 253 states and 353 transitions. [2022-02-20 18:11:52,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:52,623 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 49 [2022-02-20 18:11:52,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:52,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:52,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 353 transitions. [2022-02-20 18:11:52,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:52,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 353 transitions. [2022-02-20 18:11:52,644 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 353 transitions. [2022-02-20 18:11:52,909 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 353 edges. 353 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:52,918 INFO L225 Difference]: With dead ends: 253 [2022-02-20 18:11:52,918 INFO L226 Difference]: Without dead ends: 129 [2022-02-20 18:11:52,921 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:52,924 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:52,924 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 183 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:52,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-02-20 18:11:52,957 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 129. [2022-02-20 18:11:52,957 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:52,958 INFO L82 GeneralOperation]: Start isEquivalent. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:52,959 INFO L74 IsIncluded]: Start isIncluded. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:52,960 INFO L87 Difference]: Start difference. First operand 129 states. Second operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:52,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:52,967 INFO L93 Difference]: Finished difference Result 129 states and 174 transitions. [2022-02-20 18:11:52,967 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:52,969 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:52,969 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:52,970 INFO L74 IsIncluded]: Start isIncluded. First operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 129 states. [2022-02-20 18:11:52,970 INFO L87 Difference]: Start difference. First operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) Second operand 129 states. [2022-02-20 18:11:52,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:52,976 INFO L93 Difference]: Finished difference Result 129 states and 174 transitions. [2022-02-20 18:11:52,976 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:52,978 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:52,978 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:52,979 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:52,979 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:52,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 90 states have (on average 1.3222222222222222) internal successors, (119), 105 states have internal predecessors, (119), 28 states have call successors, (28), 11 states have call predecessors, (28), 10 states have return successors, (27), 22 states have call predecessors, (27), 27 states have call successors, (27) [2022-02-20 18:11:52,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 174 transitions. [2022-02-20 18:11:52,986 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 174 transitions. Word has length 49 [2022-02-20 18:11:52,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:52,986 INFO L470 AbstractCegarLoop]: Abstraction has 129 states and 174 transitions. [2022-02-20 18:11:52,987 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.5) internal successors, (25), 2 states have internal predecessors, (25), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:52,987 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 174 transitions. [2022-02-20 18:11:52,988 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-02-20 18:11:52,988 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:52,989 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:52,998 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-02-20 18:11:53,198 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:11:53,198 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:53,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:53,199 INFO L85 PathProgramCache]: Analyzing trace with hash -1245192373, now seen corresponding path program 1 times [2022-02-20 18:11:53,200 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:53,200 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1795861027] [2022-02-20 18:11:53,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:53,200 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:53,200 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:53,201 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:53,243 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-02-20 18:11:53,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:53,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:11:53,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:53,338 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:53,462 INFO L290 TraceCheckUtils]: 0: Hoare triple {1113#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {1113#true} is VALID [2022-02-20 18:11:53,462 INFO L290 TraceCheckUtils]: 1: Hoare triple {1113#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {1113#true} is VALID [2022-02-20 18:11:53,462 INFO L290 TraceCheckUtils]: 2: Hoare triple {1113#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L272 TraceCheckUtils]: 3: Hoare triple {1113#true} call select_features_#t~ret55#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L290 TraceCheckUtils]: 4: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L290 TraceCheckUtils]: 5: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1113#true} {1113#true} #351#return; {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L290 TraceCheckUtils]: 7: Hoare triple {1113#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1113#true} is VALID [2022-02-20 18:11:53,463 INFO L272 TraceCheckUtils]: 8: Hoare triple {1113#true} call select_features_#t~ret56#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L290 TraceCheckUtils]: 9: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L290 TraceCheckUtils]: 10: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1113#true} {1113#true} #353#return; {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L290 TraceCheckUtils]: 12: Hoare triple {1113#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L272 TraceCheckUtils]: 13: Hoare triple {1113#true} call select_features_#t~ret57#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,464 INFO L290 TraceCheckUtils]: 14: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L290 TraceCheckUtils]: 15: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1113#true} {1113#true} #355#return; {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L290 TraceCheckUtils]: 17: Hoare triple {1113#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L272 TraceCheckUtils]: 18: Hoare triple {1113#true} call select_features_#t~ret58#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L290 TraceCheckUtils]: 19: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,465 INFO L290 TraceCheckUtils]: 20: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1113#true} {1113#true} #357#return; {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L290 TraceCheckUtils]: 22: Hoare triple {1113#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L272 TraceCheckUtils]: 23: Hoare triple {1113#true} call select_features_#t~ret59#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L290 TraceCheckUtils]: 24: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L290 TraceCheckUtils]: 25: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,466 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1113#true} {1113#true} #359#return; {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L290 TraceCheckUtils]: 27: Hoare triple {1113#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L272 TraceCheckUtils]: 28: Hoare triple {1113#true} call select_features_#t~ret60#1 := select_one(); {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L290 TraceCheckUtils]: 29: Hoare triple {1113#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L290 TraceCheckUtils]: 30: Hoare triple {1113#true} assume true; {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1113#true} {1113#true} #361#return; {1113#true} is VALID [2022-02-20 18:11:53,467 INFO L290 TraceCheckUtils]: 32: Hoare triple {1113#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1113#true} is VALID [2022-02-20 18:11:53,468 INFO L290 TraceCheckUtils]: 33: Hoare triple {1113#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1113#true} is VALID [2022-02-20 18:11:53,468 INFO L290 TraceCheckUtils]: 34: Hoare triple {1113#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {1113#true} is VALID [2022-02-20 18:11:53,468 INFO L290 TraceCheckUtils]: 35: Hoare triple {1113#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1113#true} is VALID [2022-02-20 18:11:53,468 INFO L290 TraceCheckUtils]: 36: Hoare triple {1113#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {1226#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:11:53,469 INFO L290 TraceCheckUtils]: 37: Hoare triple {1226#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !false; {1226#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} is VALID [2022-02-20 18:11:53,469 INFO L290 TraceCheckUtils]: 38: Hoare triple {1226#(= |ULTIMATE.start_test_~splverifierCounter~0#1| (_ bv0 32))} assume !~bvslt32(test_~splverifierCounter~0#1, 4bv32); {1114#false} is VALID [2022-02-20 18:11:53,469 INFO L272 TraceCheckUtils]: 39: Hoare triple {1114#false} call cleanup(); {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L290 TraceCheckUtils]: 40: Hoare triple {1114#false} havoc ~i~0;havoc ~__cil_tmp2~0; {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L272 TraceCheckUtils]: 41: Hoare triple {1114#false} call timeShift(); {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L290 TraceCheckUtils]: 42: Hoare triple {1114#false} assume !(0bv32 != ~pumpRunning~0); {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L290 TraceCheckUtils]: 43: Hoare triple {1114#false} assume !(0bv32 != ~systemActive~0); {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L290 TraceCheckUtils]: 44: Hoare triple {1114#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {1114#false} is VALID [2022-02-20 18:11:53,470 INFO L290 TraceCheckUtils]: 45: Hoare triple {1114#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {1114#false} is VALID [2022-02-20 18:11:53,471 INFO L290 TraceCheckUtils]: 46: Hoare triple {1114#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {1114#false} is VALID [2022-02-20 18:11:53,471 INFO L290 TraceCheckUtils]: 47: Hoare triple {1114#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {1114#false} is VALID [2022-02-20 18:11:53,471 INFO L290 TraceCheckUtils]: 48: Hoare triple {1114#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1114#false} is VALID [2022-02-20 18:11:53,471 INFO L290 TraceCheckUtils]: 49: Hoare triple {1114#false} assume !false; {1114#false} is VALID [2022-02-20 18:11:53,471 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:53,471 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:53,472 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:53,472 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1795861027] [2022-02-20 18:11:53,472 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1795861027] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:53,472 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:53,472 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:53,472 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118307904] [2022-02-20 18:11:53,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:53,474 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 50 [2022-02-20 18:11:53,474 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:53,474 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:53,503 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:53,503 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:53,504 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:53,504 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:53,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:53,505 INFO L87 Difference]: Start difference. First operand 129 states and 174 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:53,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:53,661 INFO L93 Difference]: Finished difference Result 202 states and 273 transitions. [2022-02-20 18:11:53,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:53,661 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 50 [2022-02-20 18:11:53,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:53,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:53,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 273 transitions. [2022-02-20 18:11:53,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:53,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 273 transitions. [2022-02-20 18:11:53,668 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 273 transitions. [2022-02-20 18:11:53,873 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 273 edges. 273 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:53,876 INFO L225 Difference]: With dead ends: 202 [2022-02-20 18:11:53,877 INFO L226 Difference]: Without dead ends: 120 [2022-02-20 18:11:53,877 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:53,878 INFO L933 BasicCegarLoop]: 161 mSDtfsCounter, 21 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 296 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:53,879 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [25 Valid, 296 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:53,879 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2022-02-20 18:11:53,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 120. [2022-02-20 18:11:53,886 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:53,886 INFO L82 GeneralOperation]: Start isEquivalent. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:53,887 INFO L74 IsIncluded]: Start isIncluded. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:53,888 INFO L87 Difference]: Start difference. First operand 120 states. Second operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:53,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:53,892 INFO L93 Difference]: Finished difference Result 120 states and 162 transitions. [2022-02-20 18:11:53,892 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:53,893 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:53,893 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:53,894 INFO L74 IsIncluded]: Start isIncluded. First operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) Second operand 120 states. [2022-02-20 18:11:53,894 INFO L87 Difference]: Start difference. First operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) Second operand 120 states. [2022-02-20 18:11:53,898 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:53,898 INFO L93 Difference]: Finished difference Result 120 states and 162 transitions. [2022-02-20 18:11:53,898 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:53,899 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:53,899 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:53,899 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:53,899 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:53,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120 states, 84 states have (on average 1.3333333333333333) internal successors, (112), 99 states have internal predecessors, (112), 25 states have call successors, (25), 10 states have call predecessors, (25), 10 states have return successors, (25), 20 states have call predecessors, (25), 25 states have call successors, (25) [2022-02-20 18:11:53,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120 states to 120 states and 162 transitions. [2022-02-20 18:11:53,904 INFO L78 Accepts]: Start accepts. Automaton has 120 states and 162 transitions. Word has length 50 [2022-02-20 18:11:53,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:53,904 INFO L470 AbstractCegarLoop]: Abstraction has 120 states and 162 transitions. [2022-02-20 18:11:53,904 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:53,905 INFO L276 IsEmpty]: Start isEmpty. Operand 120 states and 162 transitions. [2022-02-20 18:11:53,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:11:53,906 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:53,906 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:53,929 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-02-20 18:11:54,133 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:11:54,134 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:54,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:54,135 INFO L85 PathProgramCache]: Analyzing trace with hash -327824829, now seen corresponding path program 1 times [2022-02-20 18:11:54,136 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:54,136 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1463123111] [2022-02-20 18:11:54,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:54,136 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:54,136 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:54,137 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:54,150 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-02-20 18:11:54,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:54,273 INFO L263 TraceCheckSpWp]: Trace formula consists of 209 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:11:54,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:54,293 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:54,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {1983#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,449 INFO L290 TraceCheckUtils]: 1: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,450 INFO L290 TraceCheckUtils]: 2: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,452 INFO L272 TraceCheckUtils]: 3: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,453 INFO L290 TraceCheckUtils]: 4: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,453 INFO L290 TraceCheckUtils]: 5: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,454 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #351#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,454 INFO L290 TraceCheckUtils]: 7: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,454 INFO L272 TraceCheckUtils]: 8: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,455 INFO L290 TraceCheckUtils]: 9: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,456 INFO L290 TraceCheckUtils]: 10: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,456 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #353#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,457 INFO L290 TraceCheckUtils]: 12: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,457 INFO L272 TraceCheckUtils]: 13: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,459 INFO L290 TraceCheckUtils]: 14: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,459 INFO L290 TraceCheckUtils]: 15: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,466 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #355#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,467 INFO L290 TraceCheckUtils]: 17: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,470 INFO L272 TraceCheckUtils]: 18: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,470 INFO L290 TraceCheckUtils]: 19: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,470 INFO L290 TraceCheckUtils]: 20: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,471 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #357#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,471 INFO L290 TraceCheckUtils]: 22: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,472 INFO L272 TraceCheckUtils]: 23: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,472 INFO L290 TraceCheckUtils]: 24: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,473 INFO L290 TraceCheckUtils]: 25: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,473 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #359#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,473 INFO L290 TraceCheckUtils]: 27: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,474 INFO L272 TraceCheckUtils]: 28: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,474 INFO L290 TraceCheckUtils]: 29: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,474 INFO L290 TraceCheckUtils]: 30: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,475 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {1988#(= ~systemActive~0 (_ bv1 32))} {1988#(= ~systemActive~0 (_ bv1 32))} #361#return; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,475 INFO L290 TraceCheckUtils]: 32: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,476 INFO L290 TraceCheckUtils]: 33: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,476 INFO L290 TraceCheckUtils]: 34: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,476 INFO L290 TraceCheckUtils]: 35: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,477 INFO L290 TraceCheckUtils]: 36: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,477 INFO L290 TraceCheckUtils]: 37: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !false; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,477 INFO L290 TraceCheckUtils]: 38: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,478 INFO L290 TraceCheckUtils]: 39: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,478 INFO L290 TraceCheckUtils]: 40: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~8#1); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,478 INFO L290 TraceCheckUtils]: 41: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,480 INFO L290 TraceCheckUtils]: 42: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___0~3#1); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,480 INFO L290 TraceCheckUtils]: 43: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,481 INFO L290 TraceCheckUtils]: 44: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,481 INFO L290 TraceCheckUtils]: 45: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___1~0#1); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,481 INFO L272 TraceCheckUtils]: 46: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} call timeShift(); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,482 INFO L290 TraceCheckUtils]: 47: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {1988#(= ~systemActive~0 (_ bv1 32))} is VALID [2022-02-20 18:11:54,482 INFO L290 TraceCheckUtils]: 48: Hoare triple {1988#(= ~systemActive~0 (_ bv1 32))} assume !(0bv32 != ~systemActive~0); {1984#false} is VALID [2022-02-20 18:11:54,483 INFO L290 TraceCheckUtils]: 49: Hoare triple {1984#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {1984#false} is VALID [2022-02-20 18:11:54,484 INFO L290 TraceCheckUtils]: 50: Hoare triple {1984#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {1984#false} is VALID [2022-02-20 18:11:54,485 INFO L290 TraceCheckUtils]: 51: Hoare triple {1984#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {1984#false} is VALID [2022-02-20 18:11:54,485 INFO L290 TraceCheckUtils]: 52: Hoare triple {1984#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {1984#false} is VALID [2022-02-20 18:11:54,486 INFO L290 TraceCheckUtils]: 53: Hoare triple {1984#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {1984#false} is VALID [2022-02-20 18:11:54,486 INFO L290 TraceCheckUtils]: 54: Hoare triple {1984#false} assume !false; {1984#false} is VALID [2022-02-20 18:11:54,486 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:54,486 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:54,487 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:54,487 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1463123111] [2022-02-20 18:11:54,487 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1463123111] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:54,489 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:54,490 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:54,490 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1463846320] [2022-02-20 18:11:54,490 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:54,490 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 55 [2022-02-20 18:11:54,491 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:54,491 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:54,526 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:54,526 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:54,526 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:54,527 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:54,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:54,528 INFO L87 Difference]: Start difference. First operand 120 states and 162 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:54,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:54,735 INFO L93 Difference]: Finished difference Result 314 states and 431 transitions. [2022-02-20 18:11:54,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:54,736 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 55 [2022-02-20 18:11:54,736 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:54,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:54,741 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 431 transitions. [2022-02-20 18:11:54,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:54,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 431 transitions. [2022-02-20 18:11:54,748 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 431 transitions. [2022-02-20 18:11:55,072 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 431 edges. 431 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:55,076 INFO L225 Difference]: With dead ends: 314 [2022-02-20 18:11:55,076 INFO L226 Difference]: Without dead ends: 216 [2022-02-20 18:11:55,077 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:55,078 INFO L933 BasicCegarLoop]: 190 mSDtfsCounter, 120 mSDsluCounter, 130 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:55,078 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 320 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:55,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 216 states. [2022-02-20 18:11:55,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 216 to 213. [2022-02-20 18:11:55,102 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:55,102 INFO L82 GeneralOperation]: Start isEquivalent. First operand 216 states. Second operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) [2022-02-20 18:11:55,103 INFO L74 IsIncluded]: Start isIncluded. First operand 216 states. Second operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) [2022-02-20 18:11:55,104 INFO L87 Difference]: Start difference. First operand 216 states. Second operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) [2022-02-20 18:11:55,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:55,110 INFO L93 Difference]: Finished difference Result 216 states and 294 transitions. [2022-02-20 18:11:55,110 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 294 transitions. [2022-02-20 18:11:55,111 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:55,111 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:55,112 INFO L74 IsIncluded]: Start isIncluded. First operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) Second operand 216 states. [2022-02-20 18:11:55,112 INFO L87 Difference]: Start difference. First operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) Second operand 216 states. [2022-02-20 18:11:55,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:55,118 INFO L93 Difference]: Finished difference Result 216 states and 294 transitions. [2022-02-20 18:11:55,118 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 294 transitions. [2022-02-20 18:11:55,119 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:55,119 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:55,120 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:55,120 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:55,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 178 states have internal predecessors, (204), 44 states have call successors, (44), 19 states have call predecessors, (44), 19 states have return successors, (44), 33 states have call predecessors, (44), 44 states have call successors, (44) [2022-02-20 18:11:55,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 292 transitions. [2022-02-20 18:11:55,126 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 292 transitions. Word has length 55 [2022-02-20 18:11:55,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:55,127 INFO L470 AbstractCegarLoop]: Abstraction has 213 states and 292 transitions. [2022-02-20 18:11:55,127 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 2 states have internal predecessors, (32), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:55,127 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 292 transitions. [2022-02-20 18:11:55,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-20 18:11:55,128 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:55,128 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:55,137 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:55,335 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:11:55,336 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:55,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:55,336 INFO L85 PathProgramCache]: Analyzing trace with hash -435041523, now seen corresponding path program 1 times [2022-02-20 18:11:55,337 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:55,337 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [786091996] [2022-02-20 18:11:55,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:55,337 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:55,337 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:55,338 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:55,340 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-02-20 18:11:55,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:55,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 7 conjunts are in the unsatisfiable core [2022-02-20 18:11:55,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:55,450 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:55,665 INFO L290 TraceCheckUtils]: 0: Hoare triple {3357#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,665 INFO L290 TraceCheckUtils]: 1: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,666 INFO L290 TraceCheckUtils]: 2: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,666 INFO L272 TraceCheckUtils]: 3: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,666 INFO L290 TraceCheckUtils]: 4: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,667 INFO L290 TraceCheckUtils]: 5: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,667 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #351#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,667 INFO L290 TraceCheckUtils]: 7: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,668 INFO L272 TraceCheckUtils]: 8: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,668 INFO L290 TraceCheckUtils]: 9: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,668 INFO L290 TraceCheckUtils]: 10: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,669 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #353#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,669 INFO L290 TraceCheckUtils]: 12: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,669 INFO L272 TraceCheckUtils]: 13: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,670 INFO L290 TraceCheckUtils]: 14: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,670 INFO L290 TraceCheckUtils]: 15: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,670 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #355#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,671 INFO L290 TraceCheckUtils]: 17: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,671 INFO L272 TraceCheckUtils]: 18: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,671 INFO L290 TraceCheckUtils]: 19: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,672 INFO L290 TraceCheckUtils]: 20: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,672 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #357#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,672 INFO L290 TraceCheckUtils]: 22: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,673 INFO L272 TraceCheckUtils]: 23: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,673 INFO L290 TraceCheckUtils]: 24: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,673 INFO L290 TraceCheckUtils]: 25: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,674 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #359#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,674 INFO L290 TraceCheckUtils]: 27: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,674 INFO L272 TraceCheckUtils]: 28: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,675 INFO L290 TraceCheckUtils]: 29: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,675 INFO L290 TraceCheckUtils]: 30: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,675 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {3362#(= ~waterLevel~0 (_ bv1 32))} {3362#(= ~waterLevel~0 (_ bv1 32))} #361#return; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,676 INFO L290 TraceCheckUtils]: 32: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,676 INFO L290 TraceCheckUtils]: 33: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,676 INFO L290 TraceCheckUtils]: 34: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,677 INFO L290 TraceCheckUtils]: 35: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,677 INFO L290 TraceCheckUtils]: 36: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,691 INFO L290 TraceCheckUtils]: 37: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !false; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,692 INFO L290 TraceCheckUtils]: 38: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,692 INFO L290 TraceCheckUtils]: 39: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,693 INFO L290 TraceCheckUtils]: 40: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp~8#1); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,693 INFO L290 TraceCheckUtils]: 41: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,693 INFO L290 TraceCheckUtils]: 42: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___0~3#1); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,694 INFO L290 TraceCheckUtils]: 43: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,694 INFO L290 TraceCheckUtils]: 44: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,694 INFO L290 TraceCheckUtils]: 45: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp___1~0#1; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,695 INFO L290 TraceCheckUtils]: 46: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,695 INFO L290 TraceCheckUtils]: 47: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,695 INFO L290 TraceCheckUtils]: 48: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} ~systemActive~0 := 0bv32; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,696 INFO L290 TraceCheckUtils]: 49: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_stopSystem } true; {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,696 INFO L272 TraceCheckUtils]: 50: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} call timeShift(); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,696 INFO L290 TraceCheckUtils]: 51: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,697 INFO L290 TraceCheckUtils]: 52: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~systemActive~0); {3362#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:55,697 INFO L290 TraceCheckUtils]: 53: Hoare triple {3362#(= ~waterLevel~0 (_ bv1 32))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {3522#(= |timeShift_getWaterLevel_#res#1| (_ bv1 32))} is VALID [2022-02-20 18:11:55,697 INFO L290 TraceCheckUtils]: 54: Hoare triple {3522#(= |timeShift_getWaterLevel_#res#1| (_ bv1 32))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {3526#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv1 32))} is VALID [2022-02-20 18:11:55,698 INFO L290 TraceCheckUtils]: 55: Hoare triple {3526#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv1 32))} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {3358#false} is VALID [2022-02-20 18:11:55,698 INFO L290 TraceCheckUtils]: 56: Hoare triple {3358#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {3358#false} is VALID [2022-02-20 18:11:55,698 INFO L290 TraceCheckUtils]: 57: Hoare triple {3358#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {3358#false} is VALID [2022-02-20 18:11:55,698 INFO L290 TraceCheckUtils]: 58: Hoare triple {3358#false} assume !false; {3358#false} is VALID [2022-02-20 18:11:55,699 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:55,699 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:55,699 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:55,699 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [786091996] [2022-02-20 18:11:55,699 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [786091996] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:55,699 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:55,699 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:11:55,699 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1396324392] [2022-02-20 18:11:55,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:55,700 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 59 [2022-02-20 18:11:55,700 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:55,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:55,748 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:55,749 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:11:55,749 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:55,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:11:55,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:55,750 INFO L87 Difference]: Start difference. First operand 213 states and 292 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:56,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:56,158 INFO L93 Difference]: Finished difference Result 583 states and 829 transitions. [2022-02-20 18:11:56,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-20 18:11:56,158 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 59 [2022-02-20 18:11:56,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:56,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:56,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 435 transitions. [2022-02-20 18:11:56,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:56,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 435 transitions. [2022-02-20 18:11:56,167 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 435 transitions. [2022-02-20 18:11:56,466 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 435 edges. 435 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:56,476 INFO L225 Difference]: With dead ends: 583 [2022-02-20 18:11:56,477 INFO L226 Difference]: Without dead ends: 392 [2022-02-20 18:11:56,477 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:56,478 INFO L933 BasicCegarLoop]: 174 mSDtfsCounter, 112 mSDsluCounter, 477 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:56,478 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [112 Valid, 651 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:56,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 392 states. [2022-02-20 18:11:56,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 392 to 392. [2022-02-20 18:11:56,516 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:56,517 INFO L82 GeneralOperation]: Start isEquivalent. First operand 392 states. Second operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) [2022-02-20 18:11:56,518 INFO L74 IsIncluded]: Start isIncluded. First operand 392 states. Second operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) [2022-02-20 18:11:56,519 INFO L87 Difference]: Start difference. First operand 392 states. Second operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) [2022-02-20 18:11:56,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:56,542 INFO L93 Difference]: Finished difference Result 392 states and 540 transitions. [2022-02-20 18:11:56,543 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 540 transitions. [2022-02-20 18:11:56,544 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:56,544 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:56,545 INFO L74 IsIncluded]: Start isIncluded. First operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) Second operand 392 states. [2022-02-20 18:11:56,546 INFO L87 Difference]: Start difference. First operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) Second operand 392 states. [2022-02-20 18:11:56,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:56,572 INFO L93 Difference]: Finished difference Result 392 states and 540 transitions. [2022-02-20 18:11:56,572 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 540 transitions. [2022-02-20 18:11:56,574 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:56,587 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:56,587 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:56,587 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:56,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 392 states, 274 states have (on average 1.364963503649635) internal successors, (374), 329 states have internal predecessors, (374), 82 states have call successors, (82), 37 states have call predecessors, (82), 35 states have return successors, (84), 58 states have call predecessors, (84), 82 states have call successors, (84) [2022-02-20 18:11:56,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 392 states to 392 states and 540 transitions. [2022-02-20 18:11:56,615 INFO L78 Accepts]: Start accepts. Automaton has 392 states and 540 transitions. Word has length 59 [2022-02-20 18:11:56,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:56,616 INFO L470 AbstractCegarLoop]: Abstraction has 392 states and 540 transitions. [2022-02-20 18:11:56,616 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 4 states have internal predecessors, (36), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:56,616 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 540 transitions. [2022-02-20 18:11:56,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-20 18:11:56,617 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:56,617 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:56,627 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-02-20 18:11:56,825 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:11:56,825 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:56,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:56,825 INFO L85 PathProgramCache]: Analyzing trace with hash 323360210, now seen corresponding path program 1 times [2022-02-20 18:11:56,826 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:56,826 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1234333133] [2022-02-20 18:11:56,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:56,826 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:56,826 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:56,827 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:56,897 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2022-02-20 18:11:56,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:56,933 INFO L263 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:11:56,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:56,949 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:57,137 INFO L290 TraceCheckUtils]: 0: Hoare triple {5765#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,138 INFO L290 TraceCheckUtils]: 2: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,139 INFO L272 TraceCheckUtils]: 3: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret55#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,139 INFO L290 TraceCheckUtils]: 4: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,140 INFO L290 TraceCheckUtils]: 5: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,140 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #351#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,140 INFO L290 TraceCheckUtils]: 7: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,141 INFO L272 TraceCheckUtils]: 8: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret56#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,141 INFO L290 TraceCheckUtils]: 9: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,142 INFO L290 TraceCheckUtils]: 10: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,142 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #353#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,142 INFO L290 TraceCheckUtils]: 12: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,143 INFO L272 TraceCheckUtils]: 13: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret57#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,143 INFO L290 TraceCheckUtils]: 14: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,144 INFO L290 TraceCheckUtils]: 15: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,144 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #355#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,145 INFO L290 TraceCheckUtils]: 17: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,145 INFO L272 TraceCheckUtils]: 18: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret58#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,145 INFO L290 TraceCheckUtils]: 19: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,146 INFO L290 TraceCheckUtils]: 20: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,146 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #357#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,147 INFO L290 TraceCheckUtils]: 22: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,147 INFO L272 TraceCheckUtils]: 23: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret59#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,147 INFO L290 TraceCheckUtils]: 24: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,148 INFO L290 TraceCheckUtils]: 25: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,148 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #359#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,154 INFO L290 TraceCheckUtils]: 27: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,154 INFO L272 TraceCheckUtils]: 28: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call select_features_#t~ret60#1 := select_one(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,155 INFO L290 TraceCheckUtils]: 29: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,155 INFO L290 TraceCheckUtils]: 30: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,155 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {5770#(= (_ bv0 32) ~pumpRunning~0)} {5770#(= (_ bv0 32) ~pumpRunning~0)} #361#return; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,156 INFO L290 TraceCheckUtils]: 32: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,156 INFO L290 TraceCheckUtils]: 33: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,156 INFO L290 TraceCheckUtils]: 34: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,157 INFO L290 TraceCheckUtils]: 35: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,157 INFO L290 TraceCheckUtils]: 36: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,158 INFO L290 TraceCheckUtils]: 37: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume !false; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,158 INFO L290 TraceCheckUtils]: 38: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,158 INFO L290 TraceCheckUtils]: 39: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,159 INFO L290 TraceCheckUtils]: 40: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != test_~tmp~8#1); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,159 INFO L290 TraceCheckUtils]: 41: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,159 INFO L290 TraceCheckUtils]: 42: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != test_~tmp___0~3#1); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,160 INFO L290 TraceCheckUtils]: 43: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,160 INFO L290 TraceCheckUtils]: 44: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,160 INFO L290 TraceCheckUtils]: 45: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != test_~tmp___1~0#1; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,161 INFO L290 TraceCheckUtils]: 46: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,161 INFO L290 TraceCheckUtils]: 47: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume !(0bv32 != ~pumpRunning~0); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,161 INFO L290 TraceCheckUtils]: 48: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} ~systemActive~0 := 0bv32; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,162 INFO L290 TraceCheckUtils]: 49: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume { :end_inline_stopSystem } true; {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,162 INFO L272 TraceCheckUtils]: 50: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} call timeShift(); {5770#(= (_ bv0 32) ~pumpRunning~0)} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 51: Hoare triple {5770#(= (_ bv0 32) ~pumpRunning~0)} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 52: Hoare triple {5766#false} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 53: Hoare triple {5766#false} assume { :end_inline_lowerWaterLevel } true; {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 54: Hoare triple {5766#false} assume !(0bv32 != ~systemActive~0); {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 55: Hoare triple {5766#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 56: Hoare triple {5766#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {5766#false} is VALID [2022-02-20 18:11:57,163 INFO L290 TraceCheckUtils]: 57: Hoare triple {5766#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {5766#false} is VALID [2022-02-20 18:11:57,164 INFO L290 TraceCheckUtils]: 58: Hoare triple {5766#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {5766#false} is VALID [2022-02-20 18:11:57,164 INFO L290 TraceCheckUtils]: 59: Hoare triple {5766#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {5766#false} is VALID [2022-02-20 18:11:57,164 INFO L290 TraceCheckUtils]: 60: Hoare triple {5766#false} assume !false; {5766#false} is VALID [2022-02-20 18:11:57,164 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:57,164 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:57,164 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:57,164 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1234333133] [2022-02-20 18:11:57,165 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1234333133] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:57,165 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:57,165 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:57,165 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2014234097] [2022-02-20 18:11:57,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:57,165 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-02-20 18:11:57,166 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:57,166 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:57,208 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:57,208 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:57,208 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:57,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:57,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:57,209 INFO L87 Difference]: Start difference. First operand 392 states and 540 transitions. Second operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:57,440 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,440 INFO L93 Difference]: Finished difference Result 924 states and 1313 transitions. [2022-02-20 18:11:57,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:57,440 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 61 [2022-02-20 18:11:57,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:57,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:57,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 391 transitions. [2022-02-20 18:11:57,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:57,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 391 transitions. [2022-02-20 18:11:57,448 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 391 transitions. [2022-02-20 18:11:57,711 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 391 edges. 391 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:57,728 INFO L225 Difference]: With dead ends: 924 [2022-02-20 18:11:57,728 INFO L226 Difference]: Without dead ends: 554 [2022-02-20 18:11:57,729 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:57,729 INFO L933 BasicCegarLoop]: 169 mSDtfsCounter, 92 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:57,730 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [92 Valid, 266 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:57,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 554 states. [2022-02-20 18:11:57,745 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 554 to 545. [2022-02-20 18:11:57,746 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:57,747 INFO L82 GeneralOperation]: Start isEquivalent. First operand 554 states. Second operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) [2022-02-20 18:11:57,748 INFO L74 IsIncluded]: Start isIncluded. First operand 554 states. Second operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) [2022-02-20 18:11:57,749 INFO L87 Difference]: Start difference. First operand 554 states. Second operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) [2022-02-20 18:11:57,763 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,763 INFO L93 Difference]: Finished difference Result 554 states and 748 transitions. [2022-02-20 18:11:57,763 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 748 transitions. [2022-02-20 18:11:57,765 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:57,765 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:57,766 INFO L74 IsIncluded]: Start isIncluded. First operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) Second operand 554 states. [2022-02-20 18:11:57,767 INFO L87 Difference]: Start difference. First operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) Second operand 554 states. [2022-02-20 18:11:57,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,781 INFO L93 Difference]: Finished difference Result 554 states and 748 transitions. [2022-02-20 18:11:57,781 INFO L276 IsEmpty]: Start isEmpty. Operand 554 states and 748 transitions. [2022-02-20 18:11:57,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:57,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:57,783 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:57,783 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:57,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 545 states, 401 states have (on average 1.319201995012469) internal successors, (529), 449 states have internal predecessors, (529), 87 states have call successors, (87), 56 states have call predecessors, (87), 56 states have return successors, (123), 86 states have call predecessors, (123), 87 states have call successors, (123) [2022-02-20 18:11:57,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 545 states to 545 states and 739 transitions. [2022-02-20 18:11:57,802 INFO L78 Accepts]: Start accepts. Automaton has 545 states and 739 transitions. Word has length 61 [2022-02-20 18:11:57,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:57,803 INFO L470 AbstractCegarLoop]: Abstraction has 545 states and 739 transitions. [2022-02-20 18:11:57,803 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.666666666666666) internal successors, (38), 2 states have internal predecessors, (38), 1 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2022-02-20 18:11:57,803 INFO L276 IsEmpty]: Start isEmpty. Operand 545 states and 739 transitions. [2022-02-20 18:11:57,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-20 18:11:57,804 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:57,804 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:57,818 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Ended with exit code 0 [2022-02-20 18:11:58,019 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:11:58,019 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:58,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:58,020 INFO L85 PathProgramCache]: Analyzing trace with hash 2086802471, now seen corresponding path program 1 times [2022-02-20 18:11:58,020 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:11:58,021 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1198822599] [2022-02-20 18:11:58,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:58,021 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:11:58,021 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:11:58,022 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:11:58,024 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2022-02-20 18:11:58,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,113 INFO L263 TraceCheckSpWp]: Trace formula consists of 220 conjuncts, 10 conjunts are in the unsatisfiable core [2022-02-20 18:11:58,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,126 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:11:58,414 INFO L290 TraceCheckUtils]: 0: Hoare triple {9203#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,414 INFO L290 TraceCheckUtils]: 1: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,415 INFO L290 TraceCheckUtils]: 2: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,415 INFO L272 TraceCheckUtils]: 3: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,416 INFO L290 TraceCheckUtils]: 4: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,416 INFO L290 TraceCheckUtils]: 5: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,416 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #351#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,417 INFO L290 TraceCheckUtils]: 7: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,417 INFO L272 TraceCheckUtils]: 8: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,417 INFO L290 TraceCheckUtils]: 9: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,418 INFO L290 TraceCheckUtils]: 10: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,418 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #353#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,418 INFO L290 TraceCheckUtils]: 12: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,419 INFO L272 TraceCheckUtils]: 13: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,420 INFO L290 TraceCheckUtils]: 14: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,420 INFO L290 TraceCheckUtils]: 15: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,420 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #355#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,421 INFO L290 TraceCheckUtils]: 17: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,421 INFO L272 TraceCheckUtils]: 18: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,421 INFO L290 TraceCheckUtils]: 19: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,422 INFO L290 TraceCheckUtils]: 20: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,422 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #357#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,422 INFO L290 TraceCheckUtils]: 22: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,423 INFO L272 TraceCheckUtils]: 23: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,423 INFO L290 TraceCheckUtils]: 24: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,424 INFO L290 TraceCheckUtils]: 25: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,424 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #359#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,424 INFO L290 TraceCheckUtils]: 27: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,425 INFO L272 TraceCheckUtils]: 28: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,425 INFO L290 TraceCheckUtils]: 29: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,425 INFO L290 TraceCheckUtils]: 30: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,426 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {9208#(= ~waterLevel~0 (_ bv1 32))} {9208#(= ~waterLevel~0 (_ bv1 32))} #361#return; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,426 INFO L290 TraceCheckUtils]: 32: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,426 INFO L290 TraceCheckUtils]: 33: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,427 INFO L290 TraceCheckUtils]: 34: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,427 INFO L290 TraceCheckUtils]: 35: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,427 INFO L290 TraceCheckUtils]: 36: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,428 INFO L290 TraceCheckUtils]: 37: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume !false; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,428 INFO L290 TraceCheckUtils]: 38: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,428 INFO L290 TraceCheckUtils]: 39: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,429 INFO L290 TraceCheckUtils]: 40: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp~8#1; {9208#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:11:58,429 INFO L272 TraceCheckUtils]: 41: Hoare triple {9208#(= ~waterLevel~0 (_ bv1 32))} call waterRise(); {9332#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:58,430 INFO L290 TraceCheckUtils]: 42: Hoare triple {9332#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {9336#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:58,437 INFO L290 TraceCheckUtils]: 43: Hoare triple {9336#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) |old(~waterLevel~0)|)} assume true; {9336#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:11:58,438 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {9336#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) |old(~waterLevel~0)|)} {9208#(= ~waterLevel~0 (_ bv1 32))} #363#return; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,438 INFO L290 TraceCheckUtils]: 45: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,439 INFO L290 TraceCheckUtils]: 46: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___0~3#1); {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,439 INFO L290 TraceCheckUtils]: 47: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,439 INFO L290 TraceCheckUtils]: 48: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,440 INFO L290 TraceCheckUtils]: 49: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume 0bv32 != test_~tmp___1~0#1; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,440 INFO L290 TraceCheckUtils]: 50: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,441 INFO L290 TraceCheckUtils]: 51: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,441 INFO L290 TraceCheckUtils]: 52: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} ~systemActive~0 := 0bv32; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,441 INFO L290 TraceCheckUtils]: 53: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume { :end_inline_stopSystem } true; {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,442 INFO L272 TraceCheckUtils]: 54: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} call timeShift(); {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,442 INFO L290 TraceCheckUtils]: 55: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != ~pumpRunning~0); {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,442 INFO L290 TraceCheckUtils]: 56: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != ~systemActive~0); {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:11:58,445 INFO L290 TraceCheckUtils]: 57: Hoare triple {9343#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {9383#(= |timeShift_getWaterLevel_#res#1| (_ bv2 32))} is VALID [2022-02-20 18:11:58,446 INFO L290 TraceCheckUtils]: 58: Hoare triple {9383#(= |timeShift_getWaterLevel_#res#1| (_ bv2 32))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {9387#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv2 32))} is VALID [2022-02-20 18:11:58,446 INFO L290 TraceCheckUtils]: 59: Hoare triple {9387#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv2 32))} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {9204#false} is VALID [2022-02-20 18:11:58,446 INFO L290 TraceCheckUtils]: 60: Hoare triple {9204#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {9204#false} is VALID [2022-02-20 18:11:58,446 INFO L290 TraceCheckUtils]: 61: Hoare triple {9204#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {9204#false} is VALID [2022-02-20 18:11:58,446 INFO L290 TraceCheckUtils]: 62: Hoare triple {9204#false} assume !false; {9204#false} is VALID [2022-02-20 18:11:58,447 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:11:58,447 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:11:58,447 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:11:58,447 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1198822599] [2022-02-20 18:11:58,447 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1198822599] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:58,447 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:58,447 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:11:58,447 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945390555] [2022-02-20 18:11:58,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:58,448 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:11:58,448 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:58,448 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:11:58,503 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,503 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:11:58,503 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:11:58,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:11:58,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:11:58,504 INFO L87 Difference]: Start difference. First operand 545 states and 739 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:12:00,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,715 INFO L93 Difference]: Finished difference Result 1500 states and 2128 transitions. [2022-02-20 18:12:00,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:12:00,715 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 63 [2022-02-20 18:12:00,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:00,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:12:00,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 611 transitions. [2022-02-20 18:12:00,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:12:00,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 611 transitions. [2022-02-20 18:12:00,726 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 611 transitions. [2022-02-20 18:12:01,145 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 611 edges. 611 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,221 INFO L225 Difference]: With dead ends: 1500 [2022-02-20 18:12:01,221 INFO L226 Difference]: Without dead ends: 1197 [2022-02-20 18:12:01,223 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 55 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=117, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:12:01,224 INFO L933 BasicCegarLoop]: 264 mSDtfsCounter, 360 mSDsluCounter, 648 mSDsCounter, 0 mSdLazyCounter, 944 mSolverCounterSat, 124 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 912 SdHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 124 IncrementalHoareTripleChecker+Valid, 944 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:01,224 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [384 Valid, 912 Invalid, 1068 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [124 Valid, 944 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-02-20 18:12:01,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1197 states. [2022-02-20 18:12:01,267 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1197 to 1168. [2022-02-20 18:12:01,267 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:01,270 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1197 states. Second operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) [2022-02-20 18:12:01,272 INFO L74 IsIncluded]: Start isIncluded. First operand 1197 states. Second operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) [2022-02-20 18:12:01,273 INFO L87 Difference]: Start difference. First operand 1197 states. Second operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) [2022-02-20 18:12:01,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,321 INFO L93 Difference]: Finished difference Result 1197 states and 1610 transitions. [2022-02-20 18:12:01,322 INFO L276 IsEmpty]: Start isEmpty. Operand 1197 states and 1610 transitions. [2022-02-20 18:12:01,325 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,325 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,328 INFO L74 IsIncluded]: Start isIncluded. First operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) Second operand 1197 states. [2022-02-20 18:12:01,330 INFO L87 Difference]: Start difference. First operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) Second operand 1197 states. [2022-02-20 18:12:01,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,378 INFO L93 Difference]: Finished difference Result 1197 states and 1610 transitions. [2022-02-20 18:12:01,379 INFO L276 IsEmpty]: Start isEmpty. Operand 1197 states and 1610 transitions. [2022-02-20 18:12:01,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,382 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:01,382 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:01,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1168 states, 868 states have (on average 1.3122119815668203) internal successors, (1139), 977 states have internal predecessors, (1139), 176 states have call successors, (176), 107 states have call predecessors, (176), 123 states have return successors, (264), 184 states have call predecessors, (264), 176 states have call successors, (264) [2022-02-20 18:12:01,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1168 states to 1168 states and 1579 transitions. [2022-02-20 18:12:01,452 INFO L78 Accepts]: Start accepts. Automaton has 1168 states and 1579 transitions. Word has length 63 [2022-02-20 18:12:01,452 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:01,452 INFO L470 AbstractCegarLoop]: Abstraction has 1168 states and 1579 transitions. [2022-02-20 18:12:01,453 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 2 states have call successors, (8), 3 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-02-20 18:12:01,453 INFO L276 IsEmpty]: Start isEmpty. Operand 1168 states and 1579 transitions. [2022-02-20 18:12:01,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-02-20 18:12:01,455 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:01,455 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:01,475 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:01,662 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:01,663 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:01,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:01,663 INFO L85 PathProgramCache]: Analyzing trace with hash -2112774338, now seen corresponding path program 1 times [2022-02-20 18:12:01,664 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:01,664 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2135768281] [2022-02-20 18:12:01,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:01,665 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:01,665 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:01,680 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:01,723 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-02-20 18:12:01,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:12:01,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,783 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 0: Hoare triple {15686#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 1: Hoare triple {15686#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 2: Hoare triple {15686#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L272 TraceCheckUtils]: 3: Hoare triple {15686#true} call select_features_#t~ret55#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 4: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 5: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {15686#true} {15686#true} #351#return; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L290 TraceCheckUtils]: 7: Hoare triple {15686#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {15686#true} is VALID [2022-02-20 18:12:02,001 INFO L272 TraceCheckUtils]: 8: Hoare triple {15686#true} call select_features_#t~ret56#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 9: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 10: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {15686#true} {15686#true} #353#return; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 12: Hoare triple {15686#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L272 TraceCheckUtils]: 13: Hoare triple {15686#true} call select_features_#t~ret57#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 14: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 15: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {15686#true} {15686#true} #355#return; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 17: Hoare triple {15686#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L272 TraceCheckUtils]: 18: Hoare triple {15686#true} call select_features_#t~ret58#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 19: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,002 INFO L290 TraceCheckUtils]: 20: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {15686#true} {15686#true} #357#return; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 22: Hoare triple {15686#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L272 TraceCheckUtils]: 23: Hoare triple {15686#true} call select_features_#t~ret59#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 24: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 25: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15686#true} {15686#true} #359#return; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 27: Hoare triple {15686#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L272 TraceCheckUtils]: 28: Hoare triple {15686#true} call select_features_#t~ret60#1 := select_one(); {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 29: Hoare triple {15686#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 30: Hoare triple {15686#true} assume true; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {15686#true} {15686#true} #361#return; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 32: Hoare triple {15686#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 33: Hoare triple {15686#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 34: Hoare triple {15686#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 35: Hoare triple {15686#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 36: Hoare triple {15686#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 37: Hoare triple {15686#true} assume !false; {15686#true} is VALID [2022-02-20 18:12:02,003 INFO L290 TraceCheckUtils]: 38: Hoare triple {15686#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 39: Hoare triple {15686#true} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 40: Hoare triple {15686#true} assume !(0bv32 != test_~tmp~8#1); {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 41: Hoare triple {15686#true} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 42: Hoare triple {15686#true} assume !(0bv32 != test_~tmp___0~3#1); {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 43: Hoare triple {15686#true} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 44: Hoare triple {15686#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 45: Hoare triple {15686#true} assume 0bv32 != test_~tmp___1~0#1; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 46: Hoare triple {15686#true} assume 0bv32 != ~__SELECTED_FEATURE_stopCommand~0;assume { :begin_inline_stopSystem } true; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 47: Hoare triple {15686#true} assume !(0bv32 != ~pumpRunning~0); {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 48: Hoare triple {15686#true} ~systemActive~0 := 0bv32; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 49: Hoare triple {15686#true} assume { :end_inline_stopSystem } true; {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L272 TraceCheckUtils]: 50: Hoare triple {15686#true} call timeShift(); {15686#true} is VALID [2022-02-20 18:12:02,004 INFO L290 TraceCheckUtils]: 51: Hoare triple {15686#true} assume !(0bv32 != ~pumpRunning~0); {15686#true} is VALID [2022-02-20 18:12:02,009 INFO L290 TraceCheckUtils]: 52: Hoare triple {15686#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,009 INFO L290 TraceCheckUtils]: 53: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,009 INFO L272 TraceCheckUtils]: 54: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} call processEnvironment__before__methaneAlarm(); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,010 INFO L290 TraceCheckUtils]: 55: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,010 INFO L272 TraceCheckUtils]: 56: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} call processEnvironment__before__lowWaterSensor(); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,010 INFO L290 TraceCheckUtils]: 57: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,011 INFO L290 TraceCheckUtils]: 58: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,011 INFO L290 TraceCheckUtils]: 59: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,011 INFO L290 TraceCheckUtils]: 60: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,012 INFO L290 TraceCheckUtils]: 61: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume 0bv32 != isHighWaterLevel_~tmp~6#1;isHighWaterLevel_~tmp___0~1#1 := 0bv32; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,012 INFO L290 TraceCheckUtils]: 62: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,012 INFO L290 TraceCheckUtils]: 63: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,012 INFO L290 TraceCheckUtils]: 64: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,013 INFO L290 TraceCheckUtils]: 65: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,013 INFO L272 TraceCheckUtils]: 66: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} call activatePump__before__methaneQuery(); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,014 INFO L290 TraceCheckUtils]: 67: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} ~pumpRunning~0 := 1bv32; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,014 INFO L290 TraceCheckUtils]: 68: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,014 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {15847#(not (= ~systemActive~0 (_ bv0 32)))} {15847#(not (= ~systemActive~0 (_ bv0 32)))} #329#return; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,015 INFO L290 TraceCheckUtils]: 70: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :end_inline_activatePump } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,015 INFO L290 TraceCheckUtils]: 71: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,015 INFO L290 TraceCheckUtils]: 72: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,015 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {15847#(not (= ~systemActive~0 (_ bv0 32)))} {15847#(not (= ~systemActive~0 (_ bv0 32)))} #379#return; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,016 INFO L290 TraceCheckUtils]: 74: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,016 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {15847#(not (= ~systemActive~0 (_ bv0 32)))} {15847#(not (= ~systemActive~0 (_ bv0 32)))} #345#return; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,016 INFO L290 TraceCheckUtils]: 76: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :end_inline_processEnvironment } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,017 INFO L290 TraceCheckUtils]: 77: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,017 INFO L290 TraceCheckUtils]: 78: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,017 INFO L290 TraceCheckUtils]: 79: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,017 INFO L290 TraceCheckUtils]: 80: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,018 INFO L290 TraceCheckUtils]: 81: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,018 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {15847#(not (= ~systemActive~0 (_ bv0 32)))} {15686#true} #369#return; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,018 INFO L290 TraceCheckUtils]: 83: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !false; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,018 INFO L290 TraceCheckUtils]: 84: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,019 INFO L290 TraceCheckUtils]: 85: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,019 INFO L290 TraceCheckUtils]: 86: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp~8#1); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,019 INFO L290 TraceCheckUtils]: 87: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,020 INFO L290 TraceCheckUtils]: 88: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___0~3#1); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,020 INFO L290 TraceCheckUtils]: 89: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,020 INFO L290 TraceCheckUtils]: 90: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,020 INFO L290 TraceCheckUtils]: 91: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___1~0#1); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,021 INFO L272 TraceCheckUtils]: 92: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} call timeShift(); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,021 INFO L290 TraceCheckUtils]: 93: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,021 INFO L290 TraceCheckUtils]: 94: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,021 INFO L290 TraceCheckUtils]: 95: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume { :end_inline_lowerWaterLevel } true; {15847#(not (= ~systemActive~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 96: Hoare triple {15847#(not (= ~systemActive~0 (_ bv0 32)))} assume !(0bv32 != ~systemActive~0); {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 97: Hoare triple {15687#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 98: Hoare triple {15687#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 99: Hoare triple {15687#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 100: Hoare triple {15687#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 101: Hoare triple {15687#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L290 TraceCheckUtils]: 102: Hoare triple {15687#false} assume !false; {15687#false} is VALID [2022-02-20 18:12:02,022 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:12:02,022 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:12:02,023 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:12:02,023 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2135768281] [2022-02-20 18:12:02,023 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2135768281] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:02,023 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:02,023 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:02,023 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1220010917] [2022-02-20 18:12:02,023 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:02,023 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2022-02-20 18:12:02,024 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:02,024 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:12:02,081 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 93 edges. 93 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,081 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:02,082 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:12:02,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:02,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:02,082 INFO L87 Difference]: Start difference. First operand 1168 states and 1579 transitions. Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:12:02,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,525 INFO L93 Difference]: Finished difference Result 2436 states and 3310 transitions. [2022-02-20 18:12:02,525 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:02,525 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 103 [2022-02-20 18:12:02,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:02,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:12:02,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 343 transitions. [2022-02-20 18:12:02,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:12:02,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 343 transitions. [2022-02-20 18:12:02,531 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 343 transitions. [2022-02-20 18:12:02,740 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 343 edges. 343 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,823 INFO L225 Difference]: With dead ends: 2436 [2022-02-20 18:12:02,823 INFO L226 Difference]: Without dead ends: 1290 [2022-02-20 18:12:02,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:02,826 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 113 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 113 SdHoareTripleChecker+Valid, 212 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:02,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [113 Valid, 212 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:02,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1290 states. [2022-02-20 18:12:02,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1290 to 1280. [2022-02-20 18:12:02,861 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:02,863 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1290 states. Second operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:02,865 INFO L74 IsIncluded]: Start isIncluded. First operand 1290 states. Second operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:02,867 INFO L87 Difference]: Start difference. First operand 1290 states. Second operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:02,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,919 INFO L93 Difference]: Finished difference Result 1290 states and 1738 transitions. [2022-02-20 18:12:02,919 INFO L276 IsEmpty]: Start isEmpty. Operand 1290 states and 1738 transitions. [2022-02-20 18:12:02,922 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,922 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,925 INFO L74 IsIncluded]: Start isIncluded. First operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) Second operand 1290 states. [2022-02-20 18:12:02,927 INFO L87 Difference]: Start difference. First operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) Second operand 1290 states. [2022-02-20 18:12:02,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,979 INFO L93 Difference]: Finished difference Result 1290 states and 1738 transitions. [2022-02-20 18:12:02,979 INFO L276 IsEmpty]: Start isEmpty. Operand 1290 states and 1738 transitions. [2022-02-20 18:12:02,982 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,982 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,983 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:02,983 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:02,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1280 states, 958 states have (on average 1.31419624217119) internal successors, (1259), 1074 states have internal predecessors, (1259), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:03,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1280 states to 1280 states and 1729 transitions. [2022-02-20 18:12:03,081 INFO L78 Accepts]: Start accepts. Automaton has 1280 states and 1729 transitions. Word has length 103 [2022-02-20 18:12:03,081 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:03,082 INFO L470 AbstractCegarLoop]: Abstraction has 1280 states and 1729 transitions. [2022-02-20 18:12:03,082 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 24.0) internal successors, (72), 3 states have internal predecessors, (72), 2 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-02-20 18:12:03,083 INFO L276 IsEmpty]: Start isEmpty. Operand 1280 states and 1729 transitions. [2022-02-20 18:12:03,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-02-20 18:12:03,085 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:03,085 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:03,105 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:03,293 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:03,293 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:03,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:03,294 INFO L85 PathProgramCache]: Analyzing trace with hash -1610005, now seen corresponding path program 1 times [2022-02-20 18:12:03,294 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:03,294 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [198595229] [2022-02-20 18:12:03,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:03,295 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:03,295 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:03,296 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:03,298 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2022-02-20 18:12:03,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,379 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 5 conjunts are in the unsatisfiable core [2022-02-20 18:12:03,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,400 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:03,610 INFO L290 TraceCheckUtils]: 0: Hoare triple {23953#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L290 TraceCheckUtils]: 1: Hoare triple {23953#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L290 TraceCheckUtils]: 2: Hoare triple {23953#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L272 TraceCheckUtils]: 3: Hoare triple {23953#true} call select_features_#t~ret55#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L290 TraceCheckUtils]: 4: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L290 TraceCheckUtils]: 5: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {23953#true} {23953#true} #351#return; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L290 TraceCheckUtils]: 7: Hoare triple {23953#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {23953#true} is VALID [2022-02-20 18:12:03,611 INFO L272 TraceCheckUtils]: 8: Hoare triple {23953#true} call select_features_#t~ret56#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 9: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 10: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {23953#true} {23953#true} #353#return; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 12: Hoare triple {23953#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L272 TraceCheckUtils]: 13: Hoare triple {23953#true} call select_features_#t~ret57#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 14: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 15: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {23953#true} {23953#true} #355#return; {23953#true} is VALID [2022-02-20 18:12:03,612 INFO L290 TraceCheckUtils]: 17: Hoare triple {23953#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L272 TraceCheckUtils]: 18: Hoare triple {23953#true} call select_features_#t~ret58#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L290 TraceCheckUtils]: 19: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L290 TraceCheckUtils]: 20: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {23953#true} {23953#true} #357#return; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L290 TraceCheckUtils]: 22: Hoare triple {23953#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L272 TraceCheckUtils]: 23: Hoare triple {23953#true} call select_features_#t~ret59#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L290 TraceCheckUtils]: 24: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L290 TraceCheckUtils]: 25: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,613 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {23953#true} {23953#true} #359#return; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 27: Hoare triple {23953#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L272 TraceCheckUtils]: 28: Hoare triple {23953#true} call select_features_#t~ret60#1 := select_one(); {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 29: Hoare triple {23953#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 30: Hoare triple {23953#true} assume true; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {23953#true} {23953#true} #361#return; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 32: Hoare triple {23953#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 33: Hoare triple {23953#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 34: Hoare triple {23953#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 35: Hoare triple {23953#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {23953#true} is VALID [2022-02-20 18:12:03,614 INFO L290 TraceCheckUtils]: 36: Hoare triple {23953#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 37: Hoare triple {23953#true} assume !false; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 38: Hoare triple {23953#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 39: Hoare triple {23953#true} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 40: Hoare triple {23953#true} assume !(0bv32 != test_~tmp~8#1); {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 41: Hoare triple {23953#true} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 42: Hoare triple {23953#true} assume !(0bv32 != test_~tmp___0~3#1); {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 43: Hoare triple {23953#true} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 44: Hoare triple {23953#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {23953#true} is VALID [2022-02-20 18:12:03,615 INFO L290 TraceCheckUtils]: 45: Hoare triple {23953#true} assume !(0bv32 != test_~tmp___1~0#1); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L272 TraceCheckUtils]: 46: Hoare triple {23953#true} call timeShift(); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 47: Hoare triple {23953#true} assume !(0bv32 != ~pumpRunning~0); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 48: Hoare triple {23953#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 49: Hoare triple {23953#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L272 TraceCheckUtils]: 50: Hoare triple {23953#true} call processEnvironment__before__methaneAlarm(); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 51: Hoare triple {23953#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L272 TraceCheckUtils]: 52: Hoare triple {23953#true} call processEnvironment__before__lowWaterSensor(); {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 53: Hoare triple {23953#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {23953#true} is VALID [2022-02-20 18:12:03,616 INFO L290 TraceCheckUtils]: 54: Hoare triple {23953#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {23953#true} is VALID [2022-02-20 18:12:03,617 INFO L290 TraceCheckUtils]: 55: Hoare triple {23953#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {23953#true} is VALID [2022-02-20 18:12:03,617 INFO L290 TraceCheckUtils]: 56: Hoare triple {23953#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {23953#true} is VALID [2022-02-20 18:12:03,617 INFO L290 TraceCheckUtils]: 57: Hoare triple {23953#true} assume 0bv32 != isHighWaterLevel_~tmp~6#1;isHighWaterLevel_~tmp___0~1#1 := 0bv32; {24129#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1|)} is VALID [2022-02-20 18:12:03,618 INFO L290 TraceCheckUtils]: 58: Hoare triple {24129#(= (_ bv0 32) |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp___0~1#1|)} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {24133#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} is VALID [2022-02-20 18:12:03,619 INFO L290 TraceCheckUtils]: 59: Hoare triple {24133#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_#res#1| (_ bv0 32))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {24137#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| (_ bv0 32))} is VALID [2022-02-20 18:12:03,619 INFO L290 TraceCheckUtils]: 60: Hoare triple {24137#(= |processEnvironment__before__lowWaterSensor_processEnvironment__role__highWaterSensor_~tmp~2#1| (_ bv0 32))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {23954#false} is VALID [2022-02-20 18:12:03,619 INFO L290 TraceCheckUtils]: 61: Hoare triple {23954#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {23954#false} is VALID [2022-02-20 18:12:03,619 INFO L272 TraceCheckUtils]: 62: Hoare triple {23954#false} call activatePump__before__methaneQuery(); {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 63: Hoare triple {23954#false} ~pumpRunning~0 := 1bv32; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 64: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {23954#false} {23954#false} #329#return; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 66: Hoare triple {23954#false} assume { :end_inline_activatePump } true; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 67: Hoare triple {23954#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 68: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {23954#false} {23953#true} #379#return; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 70: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {23954#false} {23953#true} #345#return; {23954#false} is VALID [2022-02-20 18:12:03,620 INFO L290 TraceCheckUtils]: 72: Hoare triple {23954#false} assume { :end_inline_processEnvironment } true; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 73: Hoare triple {23954#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 74: Hoare triple {23954#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 75: Hoare triple {23954#false} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 76: Hoare triple {23954#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 77: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {23954#false} {23953#true} #369#return; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 79: Hoare triple {23954#false} assume !false; {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 80: Hoare triple {23954#false} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {23954#false} is VALID [2022-02-20 18:12:03,621 INFO L290 TraceCheckUtils]: 81: Hoare triple {23954#false} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 82: Hoare triple {23954#false} assume !(0bv32 != test_~tmp~8#1); {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 83: Hoare triple {23954#false} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 84: Hoare triple {23954#false} assume !(0bv32 != test_~tmp___0~3#1); {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 85: Hoare triple {23954#false} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 86: Hoare triple {23954#false} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 87: Hoare triple {23954#false} assume !(0bv32 != test_~tmp___1~0#1); {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L272 TraceCheckUtils]: 88: Hoare triple {23954#false} call timeShift(); {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 89: Hoare triple {23954#false} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {23954#false} is VALID [2022-02-20 18:12:03,622 INFO L290 TraceCheckUtils]: 90: Hoare triple {23954#false} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 91: Hoare triple {23954#false} assume { :end_inline_lowerWaterLevel } true; {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 92: Hoare triple {23954#false} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 93: Hoare triple {23954#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L272 TraceCheckUtils]: 94: Hoare triple {23954#false} call processEnvironment__before__methaneAlarm(); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 95: Hoare triple {23954#false} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L272 TraceCheckUtils]: 96: Hoare triple {23954#false} call processEnvironment__before__lowWaterSensor(); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 97: Hoare triple {23954#false} assume !(0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L272 TraceCheckUtils]: 98: Hoare triple {23954#false} call processEnvironment__before__highWaterSensor(); {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L290 TraceCheckUtils]: 99: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,623 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {23954#false} {23954#false} #335#return; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 101: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {23954#false} {23954#false} #379#return; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 103: Hoare triple {23954#false} assume true; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {23954#false} {23954#false} #345#return; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 105: Hoare triple {23954#false} assume { :end_inline_processEnvironment } true; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 106: Hoare triple {23954#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 107: Hoare triple {23954#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 108: Hoare triple {23954#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {23954#false} is VALID [2022-02-20 18:12:03,624 INFO L290 TraceCheckUtils]: 109: Hoare triple {23954#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {23954#false} is VALID [2022-02-20 18:12:03,625 INFO L290 TraceCheckUtils]: 110: Hoare triple {23954#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {23954#false} is VALID [2022-02-20 18:12:03,625 INFO L290 TraceCheckUtils]: 111: Hoare triple {23954#false} assume !false; {23954#false} is VALID [2022-02-20 18:12:03,625 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-02-20 18:12:03,625 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:12:03,625 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:12:03,625 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [198595229] [2022-02-20 18:12:03,625 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [198595229] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:03,626 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:03,626 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:03,626 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1076819964] [2022-02-20 18:12:03,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:03,626 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 112 [2022-02-20 18:12:03,627 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:03,627 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:03,687 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:03,687 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:03,688 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:12:03,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:03,688 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:03,688 INFO L87 Difference]: Start difference. First operand 1280 states and 1729 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:04,335 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,335 INFO L93 Difference]: Finished difference Result 2618 states and 3727 transitions. [2022-02-20 18:12:04,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:12:04,335 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 112 [2022-02-20 18:12:04,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:04,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:04,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 320 transitions. [2022-02-20 18:12:04,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:04,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 320 transitions. [2022-02-20 18:12:04,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 320 transitions. [2022-02-20 18:12:04,534 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 320 edges. 320 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,618 INFO L225 Difference]: With dead ends: 2618 [2022-02-20 18:12:04,618 INFO L226 Difference]: Without dead ends: 1360 [2022-02-20 18:12:04,622 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:04,622 INFO L933 BasicCegarLoop]: 165 mSDtfsCounter, 14 mSDsluCounter, 486 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 651 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:04,622 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 651 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:04,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1360 states. [2022-02-20 18:12:04,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1360 to 1304. [2022-02-20 18:12:04,660 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:04,662 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1360 states. Second operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:04,663 INFO L74 IsIncluded]: Start isIncluded. First operand 1360 states. Second operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:04,666 INFO L87 Difference]: Start difference. First operand 1360 states. Second operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:04,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,728 INFO L93 Difference]: Finished difference Result 1360 states and 1849 transitions. [2022-02-20 18:12:04,728 INFO L276 IsEmpty]: Start isEmpty. Operand 1360 states and 1849 transitions. [2022-02-20 18:12:04,731 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,731 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,734 INFO L74 IsIncluded]: Start isIncluded. First operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) Second operand 1360 states. [2022-02-20 18:12:04,735 INFO L87 Difference]: Start difference. First operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) Second operand 1360 states. [2022-02-20 18:12:04,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,792 INFO L93 Difference]: Finished difference Result 1360 states and 1849 transitions. [2022-02-20 18:12:04,792 INFO L276 IsEmpty]: Start isEmpty. Operand 1360 states and 1849 transitions. [2022-02-20 18:12:04,795 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,795 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,795 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:04,796 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:04,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1304 states, 982 states have (on average 1.3065173116089612) internal successors, (1283), 1098 states have internal predecessors, (1283), 187 states have call successors, (187), 118 states have call predecessors, (187), 134 states have return successors, (283), 194 states have call predecessors, (283), 187 states have call successors, (283) [2022-02-20 18:12:04,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1304 states to 1304 states and 1753 transitions. [2022-02-20 18:12:04,891 INFO L78 Accepts]: Start accepts. Automaton has 1304 states and 1753 transitions. Word has length 112 [2022-02-20 18:12:04,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:04,891 INFO L470 AbstractCegarLoop]: Abstraction has 1304 states and 1753 transitions. [2022-02-20 18:12:04,891 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:04,892 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1753 transitions. [2022-02-20 18:12:04,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-02-20 18:12:04,894 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:04,894 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:04,901 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2022-02-20 18:12:05,101 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:05,101 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:05,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:05,102 INFO L85 PathProgramCache]: Analyzing trace with hash 1385175405, now seen corresponding path program 1 times [2022-02-20 18:12:05,102 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:05,102 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2028256412] [2022-02-20 18:12:05,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:05,102 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:05,103 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:05,116 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:05,117 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2022-02-20 18:12:05,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,184 INFO L263 TraceCheckSpWp]: Trace formula consists of 289 conjuncts, 4 conjunts are in the unsatisfiable core [2022-02-20 18:12:05,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,204 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:05,407 INFO L290 TraceCheckUtils]: 0: Hoare triple {32675#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {32675#true} is VALID [2022-02-20 18:12:05,407 INFO L290 TraceCheckUtils]: 1: Hoare triple {32675#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {32675#true} is VALID [2022-02-20 18:12:05,407 INFO L290 TraceCheckUtils]: 2: Hoare triple {32675#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {32675#true} is VALID [2022-02-20 18:12:05,407 INFO L272 TraceCheckUtils]: 3: Hoare triple {32675#true} call select_features_#t~ret55#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 4: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 5: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {32675#true} {32675#true} #351#return; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 7: Hoare triple {32675#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L272 TraceCheckUtils]: 8: Hoare triple {32675#true} call select_features_#t~ret56#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 9: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 10: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {32675#true} {32675#true} #353#return; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L290 TraceCheckUtils]: 12: Hoare triple {32675#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {32675#true} is VALID [2022-02-20 18:12:05,408 INFO L272 TraceCheckUtils]: 13: Hoare triple {32675#true} call select_features_#t~ret57#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 14: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 15: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {32675#true} {32675#true} #355#return; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 17: Hoare triple {32675#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L272 TraceCheckUtils]: 18: Hoare triple {32675#true} call select_features_#t~ret58#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 19: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 20: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {32675#true} {32675#true} #357#return; {32675#true} is VALID [2022-02-20 18:12:05,409 INFO L290 TraceCheckUtils]: 22: Hoare triple {32675#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L272 TraceCheckUtils]: 23: Hoare triple {32675#true} call select_features_#t~ret59#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 24: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 25: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {32675#true} {32675#true} #359#return; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 27: Hoare triple {32675#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L272 TraceCheckUtils]: 28: Hoare triple {32675#true} call select_features_#t~ret60#1 := select_one(); {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 29: Hoare triple {32675#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 30: Hoare triple {32675#true} assume true; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {32675#true} {32675#true} #361#return; {32675#true} is VALID [2022-02-20 18:12:05,410 INFO L290 TraceCheckUtils]: 32: Hoare triple {32675#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 33: Hoare triple {32675#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 34: Hoare triple {32675#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 35: Hoare triple {32675#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 36: Hoare triple {32675#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 37: Hoare triple {32675#true} assume !false; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 38: Hoare triple {32675#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 39: Hoare triple {32675#true} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 40: Hoare triple {32675#true} assume !(0bv32 != test_~tmp~8#1); {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 41: Hoare triple {32675#true} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {32675#true} is VALID [2022-02-20 18:12:05,411 INFO L290 TraceCheckUtils]: 42: Hoare triple {32675#true} assume !(0bv32 != test_~tmp___0~3#1); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 43: Hoare triple {32675#true} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 44: Hoare triple {32675#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 45: Hoare triple {32675#true} assume !(0bv32 != test_~tmp___1~0#1); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L272 TraceCheckUtils]: 46: Hoare triple {32675#true} call timeShift(); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 47: Hoare triple {32675#true} assume !(0bv32 != ~pumpRunning~0); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 48: Hoare triple {32675#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 49: Hoare triple {32675#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L272 TraceCheckUtils]: 50: Hoare triple {32675#true} call processEnvironment__before__methaneAlarm(); {32675#true} is VALID [2022-02-20 18:12:05,412 INFO L290 TraceCheckUtils]: 51: Hoare triple {32675#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32675#true} is VALID [2022-02-20 18:12:05,413 INFO L272 TraceCheckUtils]: 52: Hoare triple {32675#true} call processEnvironment__before__lowWaterSensor(); {32675#true} is VALID [2022-02-20 18:12:05,413 INFO L290 TraceCheckUtils]: 53: Hoare triple {32675#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {32675#true} is VALID [2022-02-20 18:12:05,413 INFO L290 TraceCheckUtils]: 54: Hoare triple {32675#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {32675#true} is VALID [2022-02-20 18:12:05,413 INFO L290 TraceCheckUtils]: 55: Hoare triple {32675#true} assume ~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 1bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {32845#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 56: Hoare triple {32845#(= (_ bv1 32) |processEnvironment__before__lowWaterSensor_isHighWaterSensorDry_#res#1|)} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {32849#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1| (_ bv1 32))} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 57: Hoare triple {32849#(= |processEnvironment__before__lowWaterSensor_isHighWaterLevel_~tmp~6#1| (_ bv1 32))} assume !(0bv32 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {32676#false} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 58: Hoare triple {32676#false} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {32676#false} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 59: Hoare triple {32676#false} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {32676#false} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 60: Hoare triple {32676#false} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {32676#false} is VALID [2022-02-20 18:12:05,414 INFO L290 TraceCheckUtils]: 61: Hoare triple {32676#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L272 TraceCheckUtils]: 62: Hoare triple {32676#false} call activatePump__before__methaneQuery(); {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 63: Hoare triple {32676#false} ~pumpRunning~0 := 1bv32; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 64: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L284 TraceCheckUtils]: 65: Hoare quadruple {32676#false} {32676#false} #329#return; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 66: Hoare triple {32676#false} assume { :end_inline_activatePump } true; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 67: Hoare triple {32676#false} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 68: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {32676#false} {32675#true} #379#return; {32676#false} is VALID [2022-02-20 18:12:05,415 INFO L290 TraceCheckUtils]: 70: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L284 TraceCheckUtils]: 71: Hoare quadruple {32676#false} {32675#true} #345#return; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 72: Hoare triple {32676#false} assume { :end_inline_processEnvironment } true; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 73: Hoare triple {32676#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 74: Hoare triple {32676#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 75: Hoare triple {32676#false} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 76: Hoare triple {32676#false} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 77: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {32676#false} {32675#true} #369#return; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 79: Hoare triple {32676#false} assume !false; {32676#false} is VALID [2022-02-20 18:12:05,416 INFO L290 TraceCheckUtils]: 80: Hoare triple {32676#false} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 81: Hoare triple {32676#false} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 82: Hoare triple {32676#false} assume !(0bv32 != test_~tmp~8#1); {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 83: Hoare triple {32676#false} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 84: Hoare triple {32676#false} assume !(0bv32 != test_~tmp___0~3#1); {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 85: Hoare triple {32676#false} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 86: Hoare triple {32676#false} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 87: Hoare triple {32676#false} assume !(0bv32 != test_~tmp___1~0#1); {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L272 TraceCheckUtils]: 88: Hoare triple {32676#false} call timeShift(); {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 89: Hoare triple {32676#false} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {32676#false} is VALID [2022-02-20 18:12:05,417 INFO L290 TraceCheckUtils]: 90: Hoare triple {32676#false} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 91: Hoare triple {32676#false} assume { :end_inline_lowerWaterLevel } true; {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 92: Hoare triple {32676#false} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 93: Hoare triple {32676#false} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L272 TraceCheckUtils]: 94: Hoare triple {32676#false} call processEnvironment__before__methaneAlarm(); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 95: Hoare triple {32676#false} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L272 TraceCheckUtils]: 96: Hoare triple {32676#false} call processEnvironment__before__lowWaterSensor(); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 97: Hoare triple {32676#false} assume !(0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L272 TraceCheckUtils]: 98: Hoare triple {32676#false} call processEnvironment__before__highWaterSensor(); {32676#false} is VALID [2022-02-20 18:12:05,418 INFO L290 TraceCheckUtils]: 99: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L284 TraceCheckUtils]: 100: Hoare quadruple {32676#false} {32676#false} #335#return; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 101: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {32676#false} {32676#false} #379#return; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 103: Hoare triple {32676#false} assume true; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {32676#false} {32676#false} #345#return; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 105: Hoare triple {32676#false} assume { :end_inline_processEnvironment } true; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 106: Hoare triple {32676#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 107: Hoare triple {32676#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 108: Hoare triple {32676#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {32676#false} is VALID [2022-02-20 18:12:05,419 INFO L290 TraceCheckUtils]: 109: Hoare triple {32676#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {32676#false} is VALID [2022-02-20 18:12:05,420 INFO L290 TraceCheckUtils]: 110: Hoare triple {32676#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {32676#false} is VALID [2022-02-20 18:12:05,420 INFO L290 TraceCheckUtils]: 111: Hoare triple {32676#false} assume !false; {32676#false} is VALID [2022-02-20 18:12:05,420 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-02-20 18:12:05,420 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:12:05,420 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:12:05,420 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2028256412] [2022-02-20 18:12:05,420 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2028256412] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:05,421 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:05,421 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:12:05,421 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1753755629] [2022-02-20 18:12:05,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:05,421 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 112 [2022-02-20 18:12:05,422 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:05,422 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:05,484 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 97 edges. 97 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:05,484 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:12:05,484 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:12:05,485 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:12:05,485 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:12:05,485 INFO L87 Difference]: Start difference. First operand 1304 states and 1753 transitions. Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:05,996 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:05,997 INFO L93 Difference]: Finished difference Result 2444 states and 3422 transitions. [2022-02-20 18:12:05,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-20 18:12:05,997 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) Word has length 112 [2022-02-20 18:12:05,997 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:05,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:06,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 317 transitions. [2022-02-20 18:12:06,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:06,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 317 transitions. [2022-02-20 18:12:06,004 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 317 transitions. [2022-02-20 18:12:06,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:06,289 INFO L225 Difference]: With dead ends: 2444 [2022-02-20 18:12:06,289 INFO L226 Difference]: Without dead ends: 1162 [2022-02-20 18:12:06,293 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:06,295 INFO L933 BasicCegarLoop]: 166 mSDtfsCounter, 13 mSDsluCounter, 322 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:06,295 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 488 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:06,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1162 states. [2022-02-20 18:12:06,334 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1162 to 1144. [2022-02-20 18:12:06,335 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:06,336 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1162 states. Second operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) [2022-02-20 18:12:06,337 INFO L74 IsIncluded]: Start isIncluded. First operand 1162 states. Second operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) [2022-02-20 18:12:06,338 INFO L87 Difference]: Start difference. First operand 1162 states. Second operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) [2022-02-20 18:12:06,379 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,379 INFO L93 Difference]: Finished difference Result 1162 states and 1556 transitions. [2022-02-20 18:12:06,380 INFO L276 IsEmpty]: Start isEmpty. Operand 1162 states and 1556 transitions. [2022-02-20 18:12:06,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:06,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:06,384 INFO L74 IsIncluded]: Start isIncluded. First operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) Second operand 1162 states. [2022-02-20 18:12:06,385 INFO L87 Difference]: Start difference. First operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) Second operand 1162 states. [2022-02-20 18:12:06,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,428 INFO L93 Difference]: Finished difference Result 1162 states and 1556 transitions. [2022-02-20 18:12:06,428 INFO L276 IsEmpty]: Start isEmpty. Operand 1162 states and 1556 transitions. [2022-02-20 18:12:06,430 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:06,431 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:06,431 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:06,431 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:06,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1144 states, 856 states have (on average 1.308411214953271) internal successors, (1120), 959 states have internal predecessors, (1120), 170 states have call successors, (170), 105 states have call predecessors, (170), 117 states have return successors, (238), 165 states have call predecessors, (238), 170 states have call successors, (238) [2022-02-20 18:12:06,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1144 states to 1144 states and 1528 transitions. [2022-02-20 18:12:06,489 INFO L78 Accepts]: Start accepts. Automaton has 1144 states and 1528 transitions. Word has length 112 [2022-02-20 18:12:06,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:06,489 INFO L470 AbstractCegarLoop]: Abstraction has 1144 states and 1528 transitions. [2022-02-20 18:12:06,489 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.5) internal successors, (70), 4 states have internal predecessors, (70), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (13), 2 states have call predecessors, (13), 2 states have call successors, (13) [2022-02-20 18:12:06,490 INFO L276 IsEmpty]: Start isEmpty. Operand 1144 states and 1528 transitions. [2022-02-20 18:12:06,493 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-02-20 18:12:06,493 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:06,493 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:06,502 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:06,702 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:06,703 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:06,703 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:06,703 INFO L85 PathProgramCache]: Analyzing trace with hash -682729835, now seen corresponding path program 1 times [2022-02-20 18:12:06,704 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:06,704 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1745861063] [2022-02-20 18:12:06,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:06,704 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:06,704 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:06,705 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:06,706 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-02-20 18:12:06,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:06,772 INFO L263 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 2 conjunts are in the unsatisfiable core [2022-02-20 18:12:06,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:06,787 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:06,980 INFO L290 TraceCheckUtils]: 0: Hoare triple {40500#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {40500#true} is VALID [2022-02-20 18:12:06,980 INFO L290 TraceCheckUtils]: 1: Hoare triple {40500#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {40500#true} is VALID [2022-02-20 18:12:06,980 INFO L290 TraceCheckUtils]: 2: Hoare triple {40500#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {40500#true} is VALID [2022-02-20 18:12:06,980 INFO L272 TraceCheckUtils]: 3: Hoare triple {40500#true} call select_features_#t~ret55#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,980 INFO L290 TraceCheckUtils]: 4: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L290 TraceCheckUtils]: 5: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {40500#true} {40500#true} #351#return; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L290 TraceCheckUtils]: 7: Hoare triple {40500#true} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L272 TraceCheckUtils]: 8: Hoare triple {40500#true} call select_features_#t~ret56#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L290 TraceCheckUtils]: 9: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L290 TraceCheckUtils]: 10: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {40500#true} {40500#true} #353#return; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L290 TraceCheckUtils]: 12: Hoare triple {40500#true} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {40500#true} is VALID [2022-02-20 18:12:06,981 INFO L272 TraceCheckUtils]: 13: Hoare triple {40500#true} call select_features_#t~ret57#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 14: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 15: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {40500#true} {40500#true} #355#return; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 17: Hoare triple {40500#true} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L272 TraceCheckUtils]: 18: Hoare triple {40500#true} call select_features_#t~ret58#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 19: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 20: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {40500#true} {40500#true} #357#return; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L290 TraceCheckUtils]: 22: Hoare triple {40500#true} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {40500#true} is VALID [2022-02-20 18:12:06,982 INFO L272 TraceCheckUtils]: 23: Hoare triple {40500#true} call select_features_#t~ret59#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 24: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 25: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {40500#true} {40500#true} #359#return; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 27: Hoare triple {40500#true} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L272 TraceCheckUtils]: 28: Hoare triple {40500#true} call select_features_#t~ret60#1 := select_one(); {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 29: Hoare triple {40500#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 30: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {40500#true} {40500#true} #361#return; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 32: Hoare triple {40500#true} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {40500#true} is VALID [2022-02-20 18:12:06,983 INFO L290 TraceCheckUtils]: 33: Hoare triple {40500#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {40500#true} is VALID [2022-02-20 18:12:06,984 INFO L290 TraceCheckUtils]: 34: Hoare triple {40500#true} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {40500#true} is VALID [2022-02-20 18:12:06,984 INFO L290 TraceCheckUtils]: 35: Hoare triple {40500#true} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {40500#true} is VALID [2022-02-20 18:12:06,984 INFO L290 TraceCheckUtils]: 36: Hoare triple {40500#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {40500#true} is VALID [2022-02-20 18:12:06,995 INFO L290 TraceCheckUtils]: 37: Hoare triple {40500#true} assume !false; {40500#true} is VALID [2022-02-20 18:12:07,005 INFO L290 TraceCheckUtils]: 38: Hoare triple {40500#true} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 39: Hoare triple {40500#true} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 40: Hoare triple {40500#true} assume 0bv32 != test_~tmp~8#1; {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L272 TraceCheckUtils]: 41: Hoare triple {40500#true} call waterRise(); {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 42: Hoare triple {40500#true} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 43: Hoare triple {40500#true} assume true; {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {40500#true} {40500#true} #363#return; {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 45: Hoare triple {40500#true} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 46: Hoare triple {40500#true} assume !(0bv32 != test_~tmp___0~3#1); {40500#true} is VALID [2022-02-20 18:12:07,006 INFO L290 TraceCheckUtils]: 47: Hoare triple {40500#true} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 48: Hoare triple {40500#true} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 49: Hoare triple {40500#true} assume !(0bv32 != test_~tmp___1~0#1); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L272 TraceCheckUtils]: 50: Hoare triple {40500#true} call timeShift(); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 51: Hoare triple {40500#true} assume !(0bv32 != ~pumpRunning~0); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 52: Hoare triple {40500#true} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 53: Hoare triple {40500#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L272 TraceCheckUtils]: 54: Hoare triple {40500#true} call processEnvironment__before__methaneAlarm(); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L290 TraceCheckUtils]: 55: Hoare triple {40500#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {40500#true} is VALID [2022-02-20 18:12:07,007 INFO L272 TraceCheckUtils]: 56: Hoare triple {40500#true} call processEnvironment__before__lowWaterSensor(); {40500#true} is VALID [2022-02-20 18:12:07,008 INFO L290 TraceCheckUtils]: 57: Hoare triple {40500#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,008 INFO L290 TraceCheckUtils]: 58: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,008 INFO L290 TraceCheckUtils]: 59: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,009 INFO L290 TraceCheckUtils]: 60: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,009 INFO L290 TraceCheckUtils]: 61: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,009 INFO L290 TraceCheckUtils]: 62: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,009 INFO L290 TraceCheckUtils]: 63: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,010 INFO L290 TraceCheckUtils]: 64: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,010 INFO L290 TraceCheckUtils]: 65: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,010 INFO L272 TraceCheckUtils]: 66: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call activatePump__before__methaneQuery(); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,011 INFO L290 TraceCheckUtils]: 67: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} ~pumpRunning~0 := 1bv32; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,011 INFO L290 TraceCheckUtils]: 68: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,011 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #329#return; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,011 INFO L290 TraceCheckUtils]: 70: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_activatePump } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,012 INFO L290 TraceCheckUtils]: 71: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,012 INFO L290 TraceCheckUtils]: 72: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,012 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {40500#true} #379#return; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,013 INFO L290 TraceCheckUtils]: 74: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,013 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {40500#true} #345#return; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,013 INFO L290 TraceCheckUtils]: 76: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_processEnvironment } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,013 INFO L290 TraceCheckUtils]: 77: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,014 INFO L290 TraceCheckUtils]: 78: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,014 INFO L290 TraceCheckUtils]: 79: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,014 INFO L290 TraceCheckUtils]: 80: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,015 INFO L290 TraceCheckUtils]: 81: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,015 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} {40500#true} #369#return; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,015 INFO L290 TraceCheckUtils]: 83: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !false; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,015 INFO L290 TraceCheckUtils]: 84: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,016 INFO L290 TraceCheckUtils]: 85: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,016 INFO L290 TraceCheckUtils]: 86: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp~8#1); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,016 INFO L290 TraceCheckUtils]: 87: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,016 INFO L290 TraceCheckUtils]: 88: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___0~3#1); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,017 INFO L290 TraceCheckUtils]: 89: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,017 INFO L290 TraceCheckUtils]: 90: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,017 INFO L290 TraceCheckUtils]: 91: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != test_~tmp___1~0#1); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,018 INFO L272 TraceCheckUtils]: 92: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call timeShift(); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,018 INFO L290 TraceCheckUtils]: 93: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,018 INFO L290 TraceCheckUtils]: 94: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,018 INFO L290 TraceCheckUtils]: 95: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume { :end_inline_lowerWaterLevel } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,019 INFO L290 TraceCheckUtils]: 96: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,019 INFO L290 TraceCheckUtils]: 97: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,019 INFO L272 TraceCheckUtils]: 98: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call processEnvironment__before__methaneAlarm(); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,019 INFO L290 TraceCheckUtils]: 99: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,020 INFO L272 TraceCheckUtils]: 100: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} call processEnvironment__before__lowWaterSensor(); {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:07,020 INFO L290 TraceCheckUtils]: 101: Hoare triple {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0); {40501#false} is VALID [2022-02-20 18:12:07,020 INFO L272 TraceCheckUtils]: 102: Hoare triple {40501#false} call processEnvironment__before__highWaterSensor(); {40501#false} is VALID [2022-02-20 18:12:07,020 INFO L290 TraceCheckUtils]: 103: Hoare triple {40501#false} assume true; {40501#false} is VALID [2022-02-20 18:12:07,020 INFO L284 TraceCheckUtils]: 104: Hoare quadruple {40501#false} {40501#false} #335#return; {40501#false} is VALID [2022-02-20 18:12:07,020 INFO L290 TraceCheckUtils]: 105: Hoare triple {40501#false} assume true; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {40501#false} {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #379#return; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 107: Hoare triple {40501#false} assume true; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {40501#false} {40676#(not (= ~__SELECTED_FEATURE_highWaterSensor~0 (_ bv0 32)))} #345#return; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 109: Hoare triple {40501#false} assume { :end_inline_processEnvironment } true; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 110: Hoare triple {40501#false} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 111: Hoare triple {40501#false} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 112: Hoare triple {40501#false} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 113: Hoare triple {40501#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {40501#false} is VALID [2022-02-20 18:12:07,021 INFO L290 TraceCheckUtils]: 114: Hoare triple {40501#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {40501#false} is VALID [2022-02-20 18:12:07,022 INFO L290 TraceCheckUtils]: 115: Hoare triple {40501#false} assume !false; {40501#false} is VALID [2022-02-20 18:12:07,022 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 45 trivial. 0 not checked. [2022-02-20 18:12:07,022 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:12:07,022 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:12:07,022 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1745861063] [2022-02-20 18:12:07,022 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1745861063] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:07,022 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:07,022 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:07,023 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345867450] [2022-02-20 18:12:07,023 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:07,023 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 116 [2022-02-20 18:12:07,023 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:07,024 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:12:07,094 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 106 edges. 106 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:07,094 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:07,094 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:12:07,095 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:07,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:07,095 INFO L87 Difference]: Start difference. First operand 1144 states and 1528 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:12:07,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:07,533 INFO L93 Difference]: Finished difference Result 2502 states and 3450 transitions. [2022-02-20 18:12:07,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:07,533 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 116 [2022-02-20 18:12:07,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:07,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:12:07,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 372 transitions. [2022-02-20 18:12:07,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:12:07,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 372 transitions. [2022-02-20 18:12:07,539 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 372 transitions. [2022-02-20 18:12:07,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 372 edges. 372 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:07,859 INFO L225 Difference]: With dead ends: 2502 [2022-02-20 18:12:07,859 INFO L226 Difference]: Without dead ends: 1380 [2022-02-20 18:12:07,862 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:07,862 INFO L933 BasicCegarLoop]: 228 mSDtfsCounter, 90 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:07,863 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [90 Valid, 316 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:07,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1380 states. [2022-02-20 18:12:07,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1380 to 1380. [2022-02-20 18:12:07,904 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:07,905 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1380 states. Second operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) [2022-02-20 18:12:07,907 INFO L74 IsIncluded]: Start isIncluded. First operand 1380 states. Second operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) [2022-02-20 18:12:07,908 INFO L87 Difference]: Start difference. First operand 1380 states. Second operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) [2022-02-20 18:12:07,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:07,962 INFO L93 Difference]: Finished difference Result 1380 states and 1837 transitions. [2022-02-20 18:12:07,962 INFO L276 IsEmpty]: Start isEmpty. Operand 1380 states and 1837 transitions. [2022-02-20 18:12:07,965 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:07,965 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:07,967 INFO L74 IsIncluded]: Start isIncluded. First operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) Second operand 1380 states. [2022-02-20 18:12:07,968 INFO L87 Difference]: Start difference. First operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) Second operand 1380 states. [2022-02-20 18:12:08,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:08,022 INFO L93 Difference]: Finished difference Result 1380 states and 1837 transitions. [2022-02-20 18:12:08,022 INFO L276 IsEmpty]: Start isEmpty. Operand 1380 states and 1837 transitions. [2022-02-20 18:12:08,025 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:08,025 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:08,026 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:08,026 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:08,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1380 states, 1038 states have (on average 1.2967244701348748) internal successors, (1346), 1149 states have internal predecessors, (1346), 196 states have call successors, (196), 135 states have call predecessors, (196), 145 states have return successors, (295), 188 states have call predecessors, (295), 196 states have call successors, (295) [2022-02-20 18:12:08,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1380 states to 1380 states and 1837 transitions. [2022-02-20 18:12:08,107 INFO L78 Accepts]: Start accepts. Automaton has 1380 states and 1837 transitions. Word has length 116 [2022-02-20 18:12:08,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:08,108 INFO L470 AbstractCegarLoop]: Abstraction has 1380 states and 1837 transitions. [2022-02-20 18:12:08,108 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 3 states have call successors, (15), 3 states have call predecessors, (15), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-02-20 18:12:08,108 INFO L276 IsEmpty]: Start isEmpty. Operand 1380 states and 1837 transitions. [2022-02-20 18:12:08,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2022-02-20 18:12:08,110 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:08,110 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:08,131 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:08,317 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:08,318 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:08,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:08,318 INFO L85 PathProgramCache]: Analyzing trace with hash -2105279047, now seen corresponding path program 1 times [2022-02-20 18:12:08,318 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:08,318 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [980628080] [2022-02-20 18:12:08,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:08,319 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:08,319 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:08,320 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:08,321 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-02-20 18:12:08,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,417 INFO L263 TraceCheckSpWp]: Trace formula consists of 298 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:08,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,448 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:08,786 INFO L290 TraceCheckUtils]: 0: Hoare triple {49161#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,786 INFO L290 TraceCheckUtils]: 1: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,787 INFO L290 TraceCheckUtils]: 2: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,787 INFO L272 TraceCheckUtils]: 3: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret55#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,787 INFO L290 TraceCheckUtils]: 4: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,788 INFO L290 TraceCheckUtils]: 5: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,788 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #351#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,788 INFO L290 TraceCheckUtils]: 7: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,789 INFO L272 TraceCheckUtils]: 8: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret56#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,789 INFO L290 TraceCheckUtils]: 9: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,789 INFO L290 TraceCheckUtils]: 10: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,790 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #353#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,790 INFO L290 TraceCheckUtils]: 12: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,790 INFO L272 TraceCheckUtils]: 13: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret57#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,791 INFO L290 TraceCheckUtils]: 14: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,791 INFO L290 TraceCheckUtils]: 15: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,791 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #355#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,792 INFO L290 TraceCheckUtils]: 17: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,792 INFO L272 TraceCheckUtils]: 18: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret58#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,792 INFO L290 TraceCheckUtils]: 19: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,793 INFO L290 TraceCheckUtils]: 20: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,793 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #357#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,793 INFO L290 TraceCheckUtils]: 22: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,794 INFO L272 TraceCheckUtils]: 23: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret59#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,794 INFO L290 TraceCheckUtils]: 24: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,794 INFO L290 TraceCheckUtils]: 25: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,795 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #359#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,795 INFO L290 TraceCheckUtils]: 27: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,795 INFO L272 TraceCheckUtils]: 28: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call select_features_#t~ret60#1 := select_one(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,802 INFO L290 TraceCheckUtils]: 29: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,802 INFO L290 TraceCheckUtils]: 30: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,803 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #361#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,803 INFO L290 TraceCheckUtils]: 32: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,803 INFO L290 TraceCheckUtils]: 33: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,804 INFO L290 TraceCheckUtils]: 34: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,804 INFO L290 TraceCheckUtils]: 35: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,804 INFO L290 TraceCheckUtils]: 36: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,804 INFO L290 TraceCheckUtils]: 37: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume !false; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,805 INFO L290 TraceCheckUtils]: 38: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,805 INFO L290 TraceCheckUtils]: 39: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,805 INFO L290 TraceCheckUtils]: 40: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != test_~tmp~8#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,806 INFO L272 TraceCheckUtils]: 41: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call waterRise(); {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,806 INFO L290 TraceCheckUtils]: 42: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {49294#(= ~waterLevel~0 (bvadd (_ bv1 32) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,816 INFO L290 TraceCheckUtils]: 43: Hoare triple {49294#(= ~waterLevel~0 (bvadd (_ bv1 32) |old(~waterLevel~0)|))} assume true; {49294#(= ~waterLevel~0 (bvadd (_ bv1 32) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,817 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {49294#(= ~waterLevel~0 (bvadd (_ bv1 32) |old(~waterLevel~0)|))} {49166#(= ~waterLevel~0 (_ bv1 32))} #363#return; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,818 INFO L290 TraceCheckUtils]: 45: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,818 INFO L290 TraceCheckUtils]: 46: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___0~3#1); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,819 INFO L290 TraceCheckUtils]: 47: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,819 INFO L290 TraceCheckUtils]: 48: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,819 INFO L290 TraceCheckUtils]: 49: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___1~0#1); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,820 INFO L272 TraceCheckUtils]: 50: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} call timeShift(); {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,820 INFO L290 TraceCheckUtils]: 51: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0bv32 != ~pumpRunning~0); {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,820 INFO L290 TraceCheckUtils]: 52: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 53: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,821 INFO L272 TraceCheckUtils]: 54: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__before__methaneAlarm(); {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 55: Hoare triple {49161#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L272 TraceCheckUtils]: 56: Hoare triple {49161#true} call processEnvironment__before__lowWaterSensor(); {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 57: Hoare triple {49161#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 58: Hoare triple {49161#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 59: Hoare triple {49161#true} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 60: Hoare triple {49161#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 61: Hoare triple {49161#true} assume !(0bv32 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 62: Hoare triple {49161#true} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 63: Hoare triple {49161#true} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 64: Hoare triple {49161#true} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 65: Hoare triple {49161#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L272 TraceCheckUtils]: 66: Hoare triple {49161#true} call activatePump__before__methaneQuery(); {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 67: Hoare triple {49161#true} ~pumpRunning~0 := 1bv32; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L290 TraceCheckUtils]: 68: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:08,821 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {49161#true} {49161#true} #329#return; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L290 TraceCheckUtils]: 70: Hoare triple {49161#true} assume { :end_inline_activatePump } true; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L290 TraceCheckUtils]: 71: Hoare triple {49161#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L290 TraceCheckUtils]: 72: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {49161#true} {49161#true} #379#return; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L290 TraceCheckUtils]: 74: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:08,822 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {49161#true} {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} #345#return; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,823 INFO L290 TraceCheckUtils]: 76: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,823 INFO L290 TraceCheckUtils]: 77: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,823 INFO L290 TraceCheckUtils]: 78: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,824 INFO L290 TraceCheckUtils]: 79: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,824 INFO L290 TraceCheckUtils]: 80: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,824 INFO L290 TraceCheckUtils]: 81: Hoare triple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,825 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {49290#(= ~waterLevel~0 |old(~waterLevel~0)|)} {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} #369#return; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,825 INFO L290 TraceCheckUtils]: 83: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !false; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,825 INFO L290 TraceCheckUtils]: 84: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,826 INFO L290 TraceCheckUtils]: 85: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,826 INFO L290 TraceCheckUtils]: 86: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp~8#1); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,826 INFO L290 TraceCheckUtils]: 87: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,827 INFO L290 TraceCheckUtils]: 88: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___0~3#1); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,827 INFO L290 TraceCheckUtils]: 89: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,827 INFO L290 TraceCheckUtils]: 90: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,828 INFO L290 TraceCheckUtils]: 91: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume !(0bv32 != test_~tmp___1~0#1); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,828 INFO L272 TraceCheckUtils]: 92: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} call timeShift(); {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,828 INFO L290 TraceCheckUtils]: 93: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} is VALID [2022-02-20 18:12:08,829 INFO L290 TraceCheckUtils]: 94: Hoare triple {49301#(= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv1 32))} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,829 INFO L290 TraceCheckUtils]: 95: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_lowerWaterLevel } true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,829 INFO L290 TraceCheckUtils]: 96: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,830 INFO L290 TraceCheckUtils]: 97: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,830 INFO L272 TraceCheckUtils]: 98: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__methaneAlarm(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,830 INFO L290 TraceCheckUtils]: 99: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,831 INFO L272 TraceCheckUtils]: 100: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__lowWaterSensor(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,831 INFO L290 TraceCheckUtils]: 101: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,831 INFO L290 TraceCheckUtils]: 102: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume !(0bv32 == ~pumpRunning~0); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,832 INFO L272 TraceCheckUtils]: 103: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} call processEnvironment__before__highWaterSensor(); {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,832 INFO L290 TraceCheckUtils]: 104: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,832 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #333#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,832 INFO L290 TraceCheckUtils]: 106: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,833 INFO L290 TraceCheckUtils]: 107: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,833 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #379#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,833 INFO L290 TraceCheckUtils]: 109: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,834 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {49166#(= ~waterLevel~0 (_ bv1 32))} {49166#(= ~waterLevel~0 (_ bv1 32))} #345#return; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,834 INFO L290 TraceCheckUtils]: 111: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :end_inline_processEnvironment } true; {49166#(= ~waterLevel~0 (_ bv1 32))} is VALID [2022-02-20 18:12:08,834 INFO L290 TraceCheckUtils]: 112: Hoare triple {49166#(= ~waterLevel~0 (_ bv1 32))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {49506#(= |timeShift_getWaterLevel_#res#1| (_ bv1 32))} is VALID [2022-02-20 18:12:08,835 INFO L290 TraceCheckUtils]: 113: Hoare triple {49506#(= |timeShift_getWaterLevel_#res#1| (_ bv1 32))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {49510#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv1 32))} is VALID [2022-02-20 18:12:08,835 INFO L290 TraceCheckUtils]: 114: Hoare triple {49510#(= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv1 32))} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {49162#false} is VALID [2022-02-20 18:12:08,835 INFO L290 TraceCheckUtils]: 115: Hoare triple {49162#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {49162#false} is VALID [2022-02-20 18:12:08,835 INFO L290 TraceCheckUtils]: 116: Hoare triple {49162#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {49162#false} is VALID [2022-02-20 18:12:08,835 INFO L290 TraceCheckUtils]: 117: Hoare triple {49162#false} assume !false; {49162#false} is VALID [2022-02-20 18:12:08,836 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 9 proven. 12 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2022-02-20 18:12:08,836 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:09,427 INFO L290 TraceCheckUtils]: 117: Hoare triple {49162#false} assume !false; {49162#false} is VALID [2022-02-20 18:12:09,427 INFO L290 TraceCheckUtils]: 116: Hoare triple {49162#false} assume 0bv32 != __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline___automaton_fail } true; {49162#false} is VALID [2022-02-20 18:12:09,427 INFO L290 TraceCheckUtils]: 115: Hoare triple {49162#false} __utac_acc__Specification4_spec__1_#t~ret6#1 := isPumpRunning_#res#1;assume { :end_inline_isPumpRunning } true;__utac_acc__Specification4_spec__1_~tmp___0~0#1 := __utac_acc__Specification4_spec__1_#t~ret6#1;havoc __utac_acc__Specification4_spec__1_#t~ret6#1; {49162#false} is VALID [2022-02-20 18:12:09,428 INFO L290 TraceCheckUtils]: 114: Hoare triple {49532#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv0 32)))} assume 0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1;assume { :begin_inline_isPumpRunning } true;havoc isPumpRunning_#res#1;havoc isPumpRunning_~retValue_acc~2#1;havoc isPumpRunning_~retValue_acc~2#1;isPumpRunning_~retValue_acc~2#1 := ~pumpRunning~0;isPumpRunning_#res#1 := isPumpRunning_~retValue_acc~2#1; {49162#false} is VALID [2022-02-20 18:12:09,428 INFO L290 TraceCheckUtils]: 113: Hoare triple {49536#(not (= |timeShift_getWaterLevel_#res#1| (_ bv0 32)))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {49532#(not (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| (_ bv0 32)))} is VALID [2022-02-20 18:12:09,428 INFO L290 TraceCheckUtils]: 112: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {49536#(not (= |timeShift_getWaterLevel_#res#1| (_ bv0 32)))} is VALID [2022-02-20 18:12:09,429 INFO L290 TraceCheckUtils]: 111: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_processEnvironment } true; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,429 INFO L284 TraceCheckUtils]: 110: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #345#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,429 INFO L290 TraceCheckUtils]: 109: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,429 INFO L284 TraceCheckUtils]: 108: Hoare quadruple {49161#true} {49161#true} #379#return; {49161#true} is VALID [2022-02-20 18:12:09,429 INFO L290 TraceCheckUtils]: 107: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L290 TraceCheckUtils]: 106: Hoare triple {49161#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L284 TraceCheckUtils]: 105: Hoare quadruple {49161#true} {49161#true} #333#return; {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L290 TraceCheckUtils]: 104: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L272 TraceCheckUtils]: 103: Hoare triple {49161#true} call processEnvironment__before__highWaterSensor(); {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L290 TraceCheckUtils]: 102: Hoare triple {49161#true} assume !(0bv32 == ~pumpRunning~0); {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L290 TraceCheckUtils]: 101: Hoare triple {49161#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L272 TraceCheckUtils]: 100: Hoare triple {49161#true} call processEnvironment__before__lowWaterSensor(); {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L290 TraceCheckUtils]: 99: Hoare triple {49161#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {49161#true} is VALID [2022-02-20 18:12:09,430 INFO L272 TraceCheckUtils]: 98: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call processEnvironment__before__methaneAlarm(); {49161#true} is VALID [2022-02-20 18:12:09,431 INFO L290 TraceCheckUtils]: 97: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,431 INFO L290 TraceCheckUtils]: 96: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,431 INFO L290 TraceCheckUtils]: 95: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_lowerWaterLevel } true; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,432 INFO L290 TraceCheckUtils]: 94: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume ~bvsgt32(~waterLevel~0, 0bv32);~waterLevel~0 := ~bvsub32(~waterLevel~0, 1bv32); {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,432 INFO L290 TraceCheckUtils]: 93: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume 0bv32 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,432 INFO L272 TraceCheckUtils]: 92: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} call timeShift(); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,433 INFO L290 TraceCheckUtils]: 91: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___1~0#1); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,433 INFO L290 TraceCheckUtils]: 90: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,433 INFO L290 TraceCheckUtils]: 89: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,434 INFO L290 TraceCheckUtils]: 88: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___0~3#1); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,434 INFO L290 TraceCheckUtils]: 87: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,434 INFO L290 TraceCheckUtils]: 86: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp~8#1); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,435 INFO L290 TraceCheckUtils]: 85: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,435 INFO L290 TraceCheckUtils]: 84: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,435 INFO L290 TraceCheckUtils]: 83: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !false; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,436 INFO L284 TraceCheckUtils]: 82: Hoare quadruple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} #369#return; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,436 INFO L290 TraceCheckUtils]: 81: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume true; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,437 INFO L290 TraceCheckUtils]: 80: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume { :end_inline___utac_acc__Specification4_spec__1 } true; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,437 INFO L290 TraceCheckUtils]: 79: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume !(0bv32 == __utac_acc__Specification4_spec__1_~tmp~1#1); {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,437 INFO L290 TraceCheckUtils]: 78: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} __utac_acc__Specification4_spec__1_#t~ret5#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;__utac_acc__Specification4_spec__1_~tmp~1#1 := __utac_acc__Specification4_spec__1_#t~ret5#1;havoc __utac_acc__Specification4_spec__1_#t~ret5#1; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,438 INFO L290 TraceCheckUtils]: 77: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume { :begin_inline___utac_acc__Specification4_spec__1 } true;havoc __utac_acc__Specification4_spec__1_#t~ret5#1, __utac_acc__Specification4_spec__1_#t~ret6#1, __utac_acc__Specification4_spec__1_~tmp~1#1, __utac_acc__Specification4_spec__1_~tmp___0~0#1;havoc __utac_acc__Specification4_spec__1_~tmp~1#1;havoc __utac_acc__Specification4_spec__1_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~9#1;havoc getWaterLevel_~retValue_acc~9#1;getWaterLevel_~retValue_acc~9#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~9#1; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,438 INFO L290 TraceCheckUtils]: 76: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume { :end_inline_processEnvironment } true; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,439 INFO L284 TraceCheckUtils]: 75: Hoare quadruple {49161#true} {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} #345#return; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,439 INFO L290 TraceCheckUtils]: 74: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,439 INFO L284 TraceCheckUtils]: 73: Hoare quadruple {49161#true} {49161#true} #379#return; {49161#true} is VALID [2022-02-20 18:12:09,439 INFO L290 TraceCheckUtils]: 72: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,439 INFO L290 TraceCheckUtils]: 71: Hoare triple {49161#true} assume { :end_inline_processEnvironment__role__highWaterSensor } true; {49161#true} is VALID [2022-02-20 18:12:09,439 INFO L290 TraceCheckUtils]: 70: Hoare triple {49161#true} assume { :end_inline_activatePump } true; {49161#true} is VALID [2022-02-20 18:12:09,439 INFO L284 TraceCheckUtils]: 69: Hoare quadruple {49161#true} {49161#true} #329#return; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 68: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 67: Hoare triple {49161#true} ~pumpRunning~0 := 1bv32; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L272 TraceCheckUtils]: 66: Hoare triple {49161#true} call activatePump__before__methaneQuery(); {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 65: Hoare triple {49161#true} assume !(0bv32 != ~__SELECTED_FEATURE_methaneQuery~0); {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 64: Hoare triple {49161#true} assume 0bv32 != processEnvironment__role__highWaterSensor_~tmp~2#1;assume { :begin_inline_activatePump } true; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 63: Hoare triple {49161#true} processEnvironment__role__highWaterSensor_#t~ret7#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;processEnvironment__role__highWaterSensor_~tmp~2#1 := processEnvironment__role__highWaterSensor_#t~ret7#1;havoc processEnvironment__role__highWaterSensor_#t~ret7#1; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 62: Hoare triple {49161#true} isHighWaterLevel_~retValue_acc~3#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~3#1; {49161#true} is VALID [2022-02-20 18:12:09,441 INFO L290 TraceCheckUtils]: 61: Hoare triple {49161#true} assume !(0bv32 != isHighWaterLevel_~tmp~6#1);isHighWaterLevel_~tmp___0~1#1 := 1bv32; {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L290 TraceCheckUtils]: 60: Hoare triple {49161#true} isHighWaterLevel_#t~ret20#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;isHighWaterLevel_~tmp~6#1 := isHighWaterLevel_#t~ret20#1;havoc isHighWaterLevel_#t~ret20#1; {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L290 TraceCheckUtils]: 59: Hoare triple {49161#true} assume !~bvslt32(~waterLevel~0, 2bv32);isHighWaterSensorDry_~retValue_acc~10#1 := 0bv32;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~10#1; {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L290 TraceCheckUtils]: 58: Hoare triple {49161#true} assume 0bv32 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret20#1, isHighWaterLevel_~retValue_acc~3#1, isHighWaterLevel_~tmp~6#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~3#1;havoc isHighWaterLevel_~tmp~6#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~10#1;havoc isHighWaterSensorDry_~retValue_acc~10#1; {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L290 TraceCheckUtils]: 57: Hoare triple {49161#true} assume 0bv32 != ~__SELECTED_FEATURE_highWaterSensor~0;assume { :begin_inline_processEnvironment__role__highWaterSensor } true;havoc processEnvironment__role__highWaterSensor_#t~ret7#1, processEnvironment__role__highWaterSensor_~tmp~2#1;havoc processEnvironment__role__highWaterSensor_~tmp~2#1; {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L272 TraceCheckUtils]: 56: Hoare triple {49161#true} call processEnvironment__before__lowWaterSensor(); {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L290 TraceCheckUtils]: 55: Hoare triple {49161#true} assume !(0bv32 != ~__SELECTED_FEATURE_lowWaterSensor~0); {49161#true} is VALID [2022-02-20 18:12:09,442 INFO L272 TraceCheckUtils]: 54: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} call processEnvironment__before__methaneAlarm(); {49161#true} is VALID [2022-02-20 18:12:09,443 INFO L290 TraceCheckUtils]: 53: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume !(0bv32 != ~__SELECTED_FEATURE_methaneAlarm~0); {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,443 INFO L290 TraceCheckUtils]: 52: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume 0bv32 != ~systemActive~0;assume { :begin_inline_processEnvironment } true; {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,443 INFO L290 TraceCheckUtils]: 51: Hoare triple {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} assume !(0bv32 != ~pumpRunning~0); {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,444 INFO L272 TraceCheckUtils]: 50: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} call timeShift(); {49635#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (bvadd (_ bv4294967295 32) |old(~waterLevel~0)|) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,444 INFO L290 TraceCheckUtils]: 49: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___1~0#1); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,444 INFO L290 TraceCheckUtils]: 48: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___2~0#1);test_~tmp___1~0#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,445 INFO L290 TraceCheckUtils]: 47: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} test_~tmp___2~0#1 := test_#t~nondet24#1;havoc test_#t~nondet24#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,445 INFO L290 TraceCheckUtils]: 46: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} assume !(0bv32 != test_~tmp___0~3#1); {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,446 INFO L290 TraceCheckUtils]: 45: Hoare triple {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} test_~tmp___0~3#1 := test_#t~nondet23#1;havoc test_#t~nondet23#1; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,446 INFO L284 TraceCheckUtils]: 44: Hoare quadruple {49750#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #363#return; {49595#(not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32)))} is VALID [2022-02-20 18:12:09,446 INFO L290 TraceCheckUtils]: 43: Hoare triple {49750#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} assume true; {49750#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,447 INFO L290 TraceCheckUtils]: 42: Hoare triple {49757#(or (not (= ~waterLevel~0 (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} assume ~bvslt32(~waterLevel~0, 2bv32);~waterLevel~0 := ~bvadd32(1bv32, ~waterLevel~0); {49750#(or (not (= (bvadd ~waterLevel~0 (_ bv4294967295 32)) (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,447 INFO L272 TraceCheckUtils]: 41: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call waterRise(); {49757#(or (not (= ~waterLevel~0 (_ bv0 32))) (= (_ bv0 32) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,448 INFO L290 TraceCheckUtils]: 40: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume 0bv32 != test_~tmp~8#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,448 INFO L290 TraceCheckUtils]: 39: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} test_~tmp~8#1 := test_#t~nondet22#1;havoc test_#t~nondet22#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,448 INFO L290 TraceCheckUtils]: 38: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume ~bvslt32(test_~splverifierCounter~0#1, 4bv32); {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,448 INFO L290 TraceCheckUtils]: 37: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume !false; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,449 INFO L290 TraceCheckUtils]: 36: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;havoc test_#t~nondet22#1, test_#t~nondet23#1, test_#t~nondet24#1, test_#t~nondet25#1, test_~splverifierCounter~0#1, test_~tmp~8#1, test_~tmp___0~3#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~8#1;havoc test_~tmp___0~3#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0bv32; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,449 INFO L290 TraceCheckUtils]: 35: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume 0bv32 != main_~tmp~0#1;assume { :begin_inline_setup } true; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,449 INFO L290 TraceCheckUtils]: 34: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} main_#t~ret4#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~0#1 := main_#t~ret4#1;havoc main_#t~ret4#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,449 INFO L290 TraceCheckUtils]: 33: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~13#1;havoc valid_product_~retValue_acc~13#1;valid_product_~retValue_acc~13#1 := ~__SELECTED_FEATURE_base~0;valid_product_#res#1 := valid_product_~retValue_acc~13#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,450 INFO L290 TraceCheckUtils]: 32: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_startCommand~0 := select_features_#t~ret60#1;havoc select_features_#t~ret60#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,450 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #361#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,450 INFO L290 TraceCheckUtils]: 30: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,450 INFO L290 TraceCheckUtils]: 29: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,450 INFO L272 TraceCheckUtils]: 28: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret60#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,451 INFO L290 TraceCheckUtils]: 27: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_stopCommand~0 := select_features_#t~ret59#1;havoc select_features_#t~ret59#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,451 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #359#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,451 INFO L290 TraceCheckUtils]: 25: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,451 INFO L290 TraceCheckUtils]: 24: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,451 INFO L272 TraceCheckUtils]: 23: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret59#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,452 INFO L290 TraceCheckUtils]: 22: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_methaneAlarm~0 := select_features_#t~ret58#1;havoc select_features_#t~ret58#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,452 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #357#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,452 INFO L290 TraceCheckUtils]: 20: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,452 INFO L290 TraceCheckUtils]: 19: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,452 INFO L272 TraceCheckUtils]: 18: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret58#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,453 INFO L290 TraceCheckUtils]: 17: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_methaneQuery~0 := select_features_#t~ret57#1;havoc select_features_#t~ret57#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,453 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #355#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,453 INFO L290 TraceCheckUtils]: 15: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,453 INFO L290 TraceCheckUtils]: 14: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,453 INFO L272 TraceCheckUtils]: 13: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret57#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,454 INFO L290 TraceCheckUtils]: 12: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_lowWaterSensor~0 := select_features_#t~ret56#1;havoc select_features_#t~ret56#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,454 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #353#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,454 INFO L290 TraceCheckUtils]: 10: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,454 INFO L290 TraceCheckUtils]: 9: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,455 INFO L272 TraceCheckUtils]: 8: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret56#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,455 INFO L290 TraceCheckUtils]: 7: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} ~__SELECTED_FEATURE_highWaterSensor~0 := select_features_#t~ret55#1;havoc select_features_#t~ret55#1; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,457 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {49161#true} {49540#(not (= ~waterLevel~0 (_ bv0 32)))} #351#return; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,457 INFO L290 TraceCheckUtils]: 5: Hoare triple {49161#true} assume true; {49161#true} is VALID [2022-02-20 18:12:09,457 INFO L290 TraceCheckUtils]: 4: Hoare triple {49161#true} havoc ~retValue_acc~12;~choice~0 := #t~nondet54;havoc #t~nondet54;~retValue_acc~12 := ~choice~0;#res := ~retValue_acc~12; {49161#true} is VALID [2022-02-20 18:12:09,457 INFO L272 TraceCheckUtils]: 3: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} call select_features_#t~ret55#1 := select_one(); {49161#true} is VALID [2022-02-20 18:12:09,459 INFO L290 TraceCheckUtils]: 2: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;havoc select_features_#t~ret55#1, select_features_#t~ret56#1, select_features_#t~ret57#1, select_features_#t~ret58#1, select_features_#t~ret59#1, select_features_#t~ret60#1;~__SELECTED_FEATURE_base~0 := 1bv32; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,460 INFO L290 TraceCheckUtils]: 1: Hoare triple {49540#(not (= ~waterLevel~0 (_ bv0 32)))} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret4#1, main_~retValue_acc~0#1, main_~tmp~0#1;havoc main_~retValue_acc~0#1;havoc main_~tmp~0#1;assume { :begin_inline_select_helpers } true;~__GUIDSL_ROOT_PRODUCTION~0 := 1bv32; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,462 INFO L290 TraceCheckUtils]: 0: Hoare triple {49161#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0bv32, 0bv32;assume 0bv1 == #valid[0bv32];assume ~bvult32(0bv32, #StackHeapBarrier);call #Ultimate.allocInit(2bv32, 1bv32);call write~init~intINTTYPE1(48bv8, 1bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 1bv32, 1bv32, 1bv32);call #Ultimate.allocInit(38bv32, 2bv32);call #Ultimate.allocInit(12bv32, 3bv32);call #Ultimate.allocInit(13bv32, 4bv32);call #Ultimate.allocInit(3bv32, 5bv32);call write~init~intINTTYPE1(79bv8, 5bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 5bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 5bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 6bv32);call write~init~intINTTYPE1(79bv8, 6bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 6bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 6bv32, 3bv32, 1bv32);call #Ultimate.allocInit(7bv32, 7bv32);call write~init~intINTTYPE1(44bv8, 7bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(80bv8, 7bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(117bv8, 7bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(109bv8, 7bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(112bv8, 7bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 7bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 7bv32, 6bv32, 1bv32);call #Ultimate.allocInit(3bv32, 8bv32);call write~init~intINTTYPE1(79bv8, 8bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(110bv8, 8bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 8bv32, 2bv32, 1bv32);call #Ultimate.allocInit(4bv32, 9bv32);call write~init~intINTTYPE1(79bv8, 9bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(102bv8, 9bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 9bv32, 3bv32, 1bv32);call #Ultimate.allocInit(3bv32, 10bv32);call write~init~intINTTYPE1(41bv8, 10bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(32bv8, 10bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 10bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 11bv32);call write~init~intINTTYPE1(10bv8, 11bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 11bv32, 1bv32, 1bv32);call #Ultimate.allocInit(30bv32, 12bv32);call #Ultimate.allocInit(9bv32, 13bv32);call #Ultimate.allocInit(21bv32, 14bv32);call #Ultimate.allocInit(30bv32, 15bv32);call #Ultimate.allocInit(9bv32, 16bv32);call #Ultimate.allocInit(21bv32, 17bv32);call #Ultimate.allocInit(30bv32, 18bv32);call #Ultimate.allocInit(9bv32, 19bv32);call #Ultimate.allocInit(25bv32, 20bv32);call #Ultimate.allocInit(30bv32, 21bv32);call #Ultimate.allocInit(9bv32, 22bv32);call #Ultimate.allocInit(25bv32, 23bv32);call #Ultimate.allocInit(13bv32, 24bv32);call #Ultimate.allocInit(7bv32, 25bv32);call write~init~intINTTYPE1(44bv8, 25bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(77bv8, 25bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(101bv8, 25bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(116bv8, 25bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(104bv8, 25bv32, 4bv32, 1bv32);call write~init~intINTTYPE1(58bv8, 25bv32, 5bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 25bv32, 6bv32, 1bv32);call #Ultimate.allocInit(5bv32, 26bv32);call write~init~intINTTYPE1(67bv8, 26bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(82bv8, 26bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(73bv8, 26bv32, 2bv32, 1bv32);call write~init~intINTTYPE1(84bv8, 26bv32, 3bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 26bv32, 4bv32, 1bv32);call #Ultimate.allocInit(3bv32, 27bv32);call write~init~intINTTYPE1(79bv8, 27bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(75bv8, 27bv32, 1bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 27bv32, 2bv32, 1bv32);call #Ultimate.allocInit(2bv32, 28bv32);call write~init~intINTTYPE1(41bv8, 28bv32, 0bv32, 1bv32);call write~init~intINTTYPE1(0bv8, 28bv32, 1bv32, 1bv32);~cleanupTimeShifts~0 := 4bv32;~__SELECTED_FEATURE_base~0 := 0bv32;~__SELECTED_FEATURE_highWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_lowWaterSensor~0 := 0bv32;~__SELECTED_FEATURE_methaneQuery~0 := 0bv32;~__SELECTED_FEATURE_methaneAlarm~0 := 0bv32;~__SELECTED_FEATURE_stopCommand~0 := 0bv32;~__SELECTED_FEATURE_startCommand~0 := 0bv32;~__GUIDSL_ROOT_PRODUCTION~0 := 0bv32;~pumpRunning~0 := 0bv32;~systemActive~0 := 1bv32;~head~0.base, ~head~0.offset := 0bv32, 0bv32;~waterLevel~0 := 1bv32;~methaneLevelCritical~0 := 0bv32; {49540#(not (= ~waterLevel~0 (_ bv0 32)))} is VALID [2022-02-20 18:12:09,463 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-02-20 18:12:09,463 INFO L144 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-02-20 18:12:09,463 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [980628080] [2022-02-20 18:12:09,463 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleMathsat [980628080] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:09,463 INFO L191 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-02-20 18:12:09,463 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9] total 15 [2022-02-20 18:12:09,463 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [4598669] [2022-02-20 18:12:09,464 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:09,464 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) Word has length 118 [2022-02-20 18:12:09,466 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:09,466 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2022-02-20 18:12:09,599 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 176 edges. 176 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:09,599 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-02-20 18:12:09,599 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-02-20 18:12:09,599 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-02-20 18:12:09,599 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=168, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:09,600 INFO L87 Difference]: Start difference. First operand 1380 states and 1837 transitions. Second operand has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2022-02-20 18:12:15,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:15,059 INFO L93 Difference]: Finished difference Result 3317 states and 4675 transitions. [2022-02-20 18:12:15,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-02-20 18:12:15,060 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) Word has length 118 [2022-02-20 18:12:15,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:15,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2022-02-20 18:12:15,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 994 transitions. [2022-02-20 18:12:15,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2022-02-20 18:12:15,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 994 transitions. [2022-02-20 18:12:15,075 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 34 states and 994 transitions. [2022-02-20 18:12:15,846 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 994 edges. 994 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:16,088 INFO L225 Difference]: With dead ends: 3317 [2022-02-20 18:12:16,089 INFO L226 Difference]: Without dead ends: 2341 [2022-02-20 18:12:16,092 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 224 SyntacticMatches, 2 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 314 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=335, Invalid=1225, Unknown=0, NotChecked=0, Total=1560 [2022-02-20 18:12:16,092 INFO L933 BasicCegarLoop]: 260 mSDtfsCounter, 1049 mSDsluCounter, 980 mSDsCounter, 0 mSdLazyCounter, 1977 mSolverCounterSat, 487 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1079 SdHoareTripleChecker+Valid, 1240 SdHoareTripleChecker+Invalid, 2464 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 487 IncrementalHoareTripleChecker+Valid, 1977 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:16,093 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1079 Valid, 1240 Invalid, 2464 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [487 Valid, 1977 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-02-20 18:12:16,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2341 states. [2022-02-20 18:12:16,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2341 to 2267. [2022-02-20 18:12:16,194 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:16,197 INFO L82 GeneralOperation]: Start isEquivalent. First operand 2341 states. Second operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) [2022-02-20 18:12:16,200 INFO L74 IsIncluded]: Start isIncluded. First operand 2341 states. Second operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) [2022-02-20 18:12:16,203 INFO L87 Difference]: Start difference. First operand 2341 states. Second operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) [2022-02-20 18:12:16,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:16,363 INFO L93 Difference]: Finished difference Result 2341 states and 3282 transitions. [2022-02-20 18:12:16,363 INFO L276 IsEmpty]: Start isEmpty. Operand 2341 states and 3282 transitions. [2022-02-20 18:12:16,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:16,370 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:16,374 INFO L74 IsIncluded]: Start isIncluded. First operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) Second operand 2341 states. [2022-02-20 18:12:16,377 INFO L87 Difference]: Start difference. First operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) Second operand 2341 states. [2022-02-20 18:12:16,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:16,533 INFO L93 Difference]: Finished difference Result 2341 states and 3282 transitions. [2022-02-20 18:12:16,533 INFO L276 IsEmpty]: Start isEmpty. Operand 2341 states and 3282 transitions. [2022-02-20 18:12:16,539 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:16,539 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:16,539 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:16,539 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:16,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2267 states, 1706 states have (on average 1.2960140679953107) internal successors, (2211), 1888 states have internal predecessors, (2211), 319 states have call successors, (319), 218 states have call predecessors, (319), 241 states have return successors, (637), 313 states have call predecessors, (637), 319 states have call successors, (637) [2022-02-20 18:12:16,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2267 states to 2267 states and 3167 transitions. [2022-02-20 18:12:16,767 INFO L78 Accepts]: Start accepts. Automaton has 2267 states and 3167 transitions. Word has length 118 [2022-02-20 18:12:16,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:16,767 INFO L470 AbstractCegarLoop]: Abstraction has 2267 states and 3167 transitions. [2022-02-20 18:12:16,770 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.266666666666667) internal successors, (124), 14 states have internal predecessors, (124), 7 states have call successors, (27), 7 states have call predecessors, (27), 6 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2022-02-20 18:12:16,771 INFO L276 IsEmpty]: Start isEmpty. Operand 2267 states and 3167 transitions. [2022-02-20 18:12:16,774 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 154 [2022-02-20 18:12:16,775 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:16,775 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:16,795 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:16,982 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:16,983 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:16,983 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:16,983 INFO L85 PathProgramCache]: Analyzing trace with hash 1512307827, now seen corresponding path program 2 times [2022-02-20 18:12:16,983 INFO L126 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-02-20 18:12:16,984 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1794257854] [2022-02-20 18:12:16,984 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-02-20 18:12:16,984 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-02-20 18:12:16,984 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-02-20 18:12:16,985 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-02-20 18:12:16,987 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2022-02-20 18:12:17,067 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-02-20 18:12:17,067 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2022-02-20 18:12:17,067 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-02-20 18:12:17,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-02-20 18:12:17,295 INFO L138 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-02-20 18:12:17,296 INFO L628 BasicCegarLoop]: Counterexample is feasible [2022-02-20 18:12:17,296 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:17,308 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:17,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-02-20 18:12:17,509 INFO L732 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:17,511 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:17,590 FATAL L489 DefaultTranslator]: Callstack has procedure call flag but succeeding procedure is empty at [CALL] call #t~ret55 := select_one(); [2022-02-20 18:12:17,591 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError: callstack broken after backtranslation by InlinerBacktranslator at de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:216) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:225) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ModelTranslationContainer.translateProgramExecution(ModelTranslationContainer.java:206) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getProgramExecutionAsString(CounterExampleResult.java:155) at de.uni_freiburg.informatik.ultimate.core.lib.results.CounterExampleResult.getLongDescription(CounterExampleResult.java:134) at de.uni_freiburg.informatik.ultimate.core.coreplugin.services.ResultService.reportResult(ResultService.java:86) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResultReporter.reportResult(CegarLoopResultReporter.java:141) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.reportLocationResults(TraceAbstractionStarter.java:607) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:182) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:156) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:123) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:320) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:63) [2022-02-20 18:12:17,594 INFO L158 Benchmark]: Toolchain (without parser) took 26965.25ms. Allocated memory was 52.4MB in the beginning and 362.8MB in the end (delta: 310.4MB). Free memory was 28.7MB in the beginning and 317.4MB in the end (delta: -288.6MB). Peak memory consumption was 214.6MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,594 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 52.4MB. Free memory was 34.5MB in the beginning and 34.4MB in the end (delta: 44.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:17,594 INFO L158 Benchmark]: CACSL2BoogieTranslator took 682.57ms. Allocated memory was 52.4MB in the beginning and 65.0MB in the end (delta: 12.6MB). Free memory was 28.5MB in the beginning and 40.5MB in the end (delta: -11.9MB). Peak memory consumption was 7.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,594 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.07ms. Allocated memory is still 65.0MB. Free memory was 40.5MB in the beginning and 37.3MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,594 INFO L158 Benchmark]: Boogie Preprocessor took 44.79ms. Allocated memory is still 65.0MB. Free memory was 37.1MB in the beginning and 35.2MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,595 INFO L158 Benchmark]: RCFGBuilder took 549.95ms. Allocated memory is still 65.0MB. Free memory was 35.0MB in the beginning and 44.8MB in the end (delta: -9.8MB). Peak memory consumption was 8.5MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,595 INFO L158 Benchmark]: TraceAbstraction took 25619.22ms. Allocated memory was 65.0MB in the beginning and 362.8MB in the end (delta: 297.8MB). Free memory was 44.5MB in the beginning and 317.4MB in the end (delta: -272.9MB). Peak memory consumption was 217.8MB. Max. memory is 16.1GB. [2022-02-20 18:12:17,597 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 52.4MB. Free memory was 34.5MB in the beginning and 34.4MB in the end (delta: 44.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 682.57ms. Allocated memory was 52.4MB in the beginning and 65.0MB in the end (delta: 12.6MB). Free memory was 28.5MB in the beginning and 40.5MB in the end (delta: -11.9MB). Peak memory consumption was 7.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.07ms. Allocated memory is still 65.0MB. Free memory was 40.5MB in the beginning and 37.3MB in the end (delta: 3.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 44.79ms. Allocated memory is still 65.0MB. Free memory was 37.1MB in the beginning and 35.2MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 549.95ms. Allocated memory is still 65.0MB. Free memory was 35.0MB in the beginning and 44.8MB in the end (delta: -9.8MB). Peak memory consumption was 8.5MB. Max. memory is 16.1GB. * TraceAbstraction took 25619.22ms. Allocated memory was 65.0MB in the beginning and 362.8MB in the end (delta: 297.8MB). Free memory was 44.5MB in the beginning and 317.4MB in the end (delta: -272.9MB). Peak memory consumption was 217.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: callstack broken after backtranslation by InlinerBacktranslator: de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator.translateProgramExecution(InlinerBacktranslator.java:230) RESULT: Ultimate could not prove your program: Toolchain returned no result. [2022-02-20 18:12:17,626 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: AssertionError: callstack broken after backtranslation by InlinerBacktranslator