./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:54,991 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:54,992 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:55,019 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:55,020 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:55,021 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:55,022 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:55,023 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:55,024 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:55,025 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:55,026 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:55,027 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:55,028 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:55,029 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:55,030 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:55,031 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:55,032 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:55,033 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:55,034 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:55,036 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:55,037 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:55,047 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:55,048 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:55,050 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:55,053 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:55,056 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:55,057 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:55,057 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:55,058 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:55,059 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:55,059 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:55,060 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:55,061 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:55,061 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:55,063 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:55,063 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:55,063 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:55,064 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:55,064 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:55,065 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:55,065 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:55,066 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:11:55,085 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:55,086 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:55,087 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:55,087 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:55,087 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:55,088 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:55,088 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:55,088 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:55,089 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:55,089 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:55,089 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:55,089 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:55,090 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:55,091 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:55,091 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:55,092 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:55,092 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:55,093 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:55,093 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:11:55,093 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:11:55,094 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:55,094 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:55,094 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:55,094 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 06101f936f6436bac89af152aefce31c84cfc20ba80a5adfcf1af02faa2d4f3b [2022-02-20 18:11:55,265 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:55,282 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:55,284 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:55,285 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:55,285 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:55,286 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2022-02-20 18:11:55,352 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/40eeea7cb/18c019dba2934e638181f5b69d6f7de0/FLAG18383c404 [2022-02-20 18:11:55,715 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:55,716 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c [2022-02-20 18:11:55,728 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/40eeea7cb/18c019dba2934e638181f5b69d6f7de0/FLAG18383c404 [2022-02-20 18:11:56,088 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/40eeea7cb/18c019dba2934e638181f5b69d6f7de0 [2022-02-20 18:11:56,090 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:56,091 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:56,095 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:56,096 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:56,104 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:56,105 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,107 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4c190443 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56, skipping insertion in model container [2022-02-20 18:11:56,107 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,111 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:56,138 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:56,276 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2022-02-20 18:11:56,376 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:56,382 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:56,398 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product36.cil.c[2141,2154] [2022-02-20 18:11:56,447 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:56,460 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:56,461 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56 WrapperNode [2022-02-20 18:11:56,461 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:56,462 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:56,462 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:56,462 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:56,466 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,476 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,498 INFO L137 Inliner]: procedures = 56, calls = 155, calls flagged for inlining = 25, calls inlined = 21, statements flattened = 238 [2022-02-20 18:11:56,499 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:56,500 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:56,500 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:56,500 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:56,506 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,506 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,509 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,510 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,524 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,527 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,528 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,529 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:56,530 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:56,530 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:56,530 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:56,544 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (1/1) ... [2022-02-20 18:11:56,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:56,555 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:56,573 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:56,590 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:56,603 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:56,603 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:11:56,603 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:11:56,603 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:56,603 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:56,603 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:56,604 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:56,604 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:56,605 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:56,605 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:11:56,606 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:11:56,606 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:11:56,606 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:56,606 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:56,606 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:56,606 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:56,681 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:56,687 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:56,947 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:56,956 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:56,956 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:56,958 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:56 BoogieIcfgContainer [2022-02-20 18:11:56,958 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:56,960 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:56,960 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:56,963 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:56,964 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:56" (1/3) ... [2022-02-20 18:11:56,964 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54380832 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:56, skipping insertion in model container [2022-02-20 18:11:56,964 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:56" (2/3) ... [2022-02-20 18:11:56,965 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@54380832 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:56, skipping insertion in model container [2022-02-20 18:11:56,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:56" (3/3) ... [2022-02-20 18:11:56,966 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product36.cil.c [2022-02-20 18:11:56,971 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:56,971 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:57,009 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:57,015 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:57,016 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:57,043 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 67 states have (on average 1.373134328358209) internal successors, (92), 73 states have internal predecessors, (92), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-02-20 18:11:57,047 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:11:57,048 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:57,048 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:57,048 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:57,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:57,052 INFO L85 PathProgramCache]: Analyzing trace with hash -1797931529, now seen corresponding path program 1 times [2022-02-20 18:11:57,059 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:57,059 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496790060] [2022-02-20 18:11:57,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:57,060 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:57,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:57,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {88#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {88#true} is VALID [2022-02-20 18:11:57,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {88#true} assume true; {88#true} is VALID [2022-02-20 18:11:57,326 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {88#true} {89#false} #227#return; {89#false} is VALID [2022-02-20 18:11:57,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:11:57,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,339 INFO L290 TraceCheckUtils]: 0: Hoare triple {88#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {88#true} is VALID [2022-02-20 18:11:57,339 INFO L290 TraceCheckUtils]: 1: Hoare triple {88#true} assume true; {88#true} is VALID [2022-02-20 18:11:57,340 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {88#true} {89#false} #233#return; {89#false} is VALID [2022-02-20 18:11:57,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {88#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {88#true} is VALID [2022-02-20 18:11:57,341 INFO L290 TraceCheckUtils]: 1: Hoare triple {88#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {88#true} is VALID [2022-02-20 18:11:57,341 INFO L290 TraceCheckUtils]: 2: Hoare triple {88#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {88#true} is VALID [2022-02-20 18:11:57,341 INFO L290 TraceCheckUtils]: 3: Hoare triple {88#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {88#true} is VALID [2022-02-20 18:11:57,342 INFO L290 TraceCheckUtils]: 4: Hoare triple {88#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {88#true} is VALID [2022-02-20 18:11:57,342 INFO L290 TraceCheckUtils]: 5: Hoare triple {88#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {88#true} is VALID [2022-02-20 18:11:57,342 INFO L290 TraceCheckUtils]: 6: Hoare triple {88#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {88#true} is VALID [2022-02-20 18:11:57,342 INFO L290 TraceCheckUtils]: 7: Hoare triple {88#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {88#true} is VALID [2022-02-20 18:11:57,343 INFO L290 TraceCheckUtils]: 8: Hoare triple {88#true} assume false; {89#false} is VALID [2022-02-20 18:11:57,343 INFO L272 TraceCheckUtils]: 9: Hoare triple {89#false} call cleanup(); {89#false} is VALID [2022-02-20 18:11:57,344 INFO L290 TraceCheckUtils]: 10: Hoare triple {89#false} havoc ~i~0;havoc ~__cil_tmp2~0; {89#false} is VALID [2022-02-20 18:11:57,344 INFO L272 TraceCheckUtils]: 11: Hoare triple {89#false} call timeShift(); {89#false} is VALID [2022-02-20 18:11:57,344 INFO L290 TraceCheckUtils]: 12: Hoare triple {89#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {89#false} is VALID [2022-02-20 18:11:57,344 INFO L272 TraceCheckUtils]: 13: Hoare triple {89#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {88#true} is VALID [2022-02-20 18:11:57,344 INFO L290 TraceCheckUtils]: 14: Hoare triple {88#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {88#true} is VALID [2022-02-20 18:11:57,345 INFO L290 TraceCheckUtils]: 15: Hoare triple {88#true} assume true; {88#true} is VALID [2022-02-20 18:11:57,345 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {88#true} {89#false} #227#return; {89#false} is VALID [2022-02-20 18:11:57,345 INFO L290 TraceCheckUtils]: 17: Hoare triple {89#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {89#false} is VALID [2022-02-20 18:11:57,345 INFO L290 TraceCheckUtils]: 18: Hoare triple {89#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {89#false} is VALID [2022-02-20 18:11:57,346 INFO L290 TraceCheckUtils]: 19: Hoare triple {89#false} assume !(0 != ~pumpRunning~0); {89#false} is VALID [2022-02-20 18:11:57,346 INFO L290 TraceCheckUtils]: 20: Hoare triple {89#false} assume !(0 != ~systemActive~0); {89#false} is VALID [2022-02-20 18:11:57,347 INFO L290 TraceCheckUtils]: 21: Hoare triple {89#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {89#false} is VALID [2022-02-20 18:11:57,347 INFO L290 TraceCheckUtils]: 22: Hoare triple {89#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {89#false} is VALID [2022-02-20 18:11:57,348 INFO L290 TraceCheckUtils]: 23: Hoare triple {89#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {89#false} is VALID [2022-02-20 18:11:57,348 INFO L272 TraceCheckUtils]: 24: Hoare triple {89#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {88#true} is VALID [2022-02-20 18:11:57,348 INFO L290 TraceCheckUtils]: 25: Hoare triple {88#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {88#true} is VALID [2022-02-20 18:11:57,348 INFO L290 TraceCheckUtils]: 26: Hoare triple {88#true} assume true; {88#true} is VALID [2022-02-20 18:11:57,349 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {88#true} {89#false} #233#return; {89#false} is VALID [2022-02-20 18:11:57,349 INFO L290 TraceCheckUtils]: 28: Hoare triple {89#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {89#false} is VALID [2022-02-20 18:11:57,349 INFO L290 TraceCheckUtils]: 29: Hoare triple {89#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {89#false} is VALID [2022-02-20 18:11:57,349 INFO L290 TraceCheckUtils]: 30: Hoare triple {89#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {89#false} is VALID [2022-02-20 18:11:57,349 INFO L290 TraceCheckUtils]: 31: Hoare triple {89#false} assume !false; {89#false} is VALID [2022-02-20 18:11:57,350 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:57,351 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:57,351 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496790060] [2022-02-20 18:11:57,360 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496790060] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:57,360 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:57,361 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:57,363 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1824710293] [2022-02-20 18:11:57,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:57,368 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:57,370 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:57,373 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,411 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:57,412 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:57,412 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:57,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:57,432 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:57,436 INFO L87 Difference]: Start difference. First operand has 85 states, 67 states have (on average 1.373134328358209) internal successors, (92), 73 states have internal predecessors, (92), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,528 INFO L93 Difference]: Finished difference Result 161 states and 218 transitions. [2022-02-20 18:11:57,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:57,529 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:57,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:57,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 218 transitions. [2022-02-20 18:11:57,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 218 transitions. [2022-02-20 18:11:57,547 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 218 transitions. [2022-02-20 18:11:57,700 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 218 edges. 218 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:57,711 INFO L225 Difference]: With dead ends: 161 [2022-02-20 18:11:57,711 INFO L226 Difference]: Without dead ends: 76 [2022-02-20 18:11:57,717 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:57,720 INFO L933 BasicCegarLoop]: 106 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:57,721 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:57,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-02-20 18:11:57,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-02-20 18:11:57,750 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:57,751 INFO L82 GeneralOperation]: Start isEquivalent. First operand 76 states. Second operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:11:57,755 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:11:57,755 INFO L87 Difference]: Start difference. First operand 76 states. Second operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:11:57,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,768 INFO L93 Difference]: Finished difference Result 76 states and 97 transitions. [2022-02-20 18:11:57,768 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-02-20 18:11:57,769 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:57,769 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:57,769 INFO L74 IsIncluded]: Start isIncluded. First operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) Second operand 76 states. [2022-02-20 18:11:57,769 INFO L87 Difference]: Start difference. First operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) Second operand 76 states. [2022-02-20 18:11:57,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:57,781 INFO L93 Difference]: Finished difference Result 76 states and 97 transitions. [2022-02-20 18:11:57,781 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-02-20 18:11:57,782 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:57,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:57,785 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:57,785 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:57,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-02-20 18:11:57,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-02-20 18:11:57,792 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 32 [2022-02-20 18:11:57,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:57,792 INFO L470 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-02-20 18:11:57,792 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,793 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-02-20 18:11:57,794 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-02-20 18:11:57,794 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:57,794 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:57,794 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:11:57,795 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:57,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:57,795 INFO L85 PathProgramCache]: Analyzing trace with hash -1521544977, now seen corresponding path program 1 times [2022-02-20 18:11:57,795 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:57,796 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150473056] [2022-02-20 18:11:57,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:57,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:57,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:11:57,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,867 INFO L290 TraceCheckUtils]: 0: Hoare triple {593#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {593#true} is VALID [2022-02-20 18:11:57,867 INFO L290 TraceCheckUtils]: 1: Hoare triple {593#true} assume true; {593#true} is VALID [2022-02-20 18:11:57,867 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {593#true} {594#false} #227#return; {594#false} is VALID [2022-02-20 18:11:57,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:11:57,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:57,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {593#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {593#true} is VALID [2022-02-20 18:11:57,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {593#true} assume true; {593#true} is VALID [2022-02-20 18:11:57,880 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {593#true} {594#false} #233#return; {594#false} is VALID [2022-02-20 18:11:57,880 INFO L290 TraceCheckUtils]: 0: Hoare triple {593#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {593#true} is VALID [2022-02-20 18:11:57,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {593#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {593#true} is VALID [2022-02-20 18:11:57,880 INFO L290 TraceCheckUtils]: 2: Hoare triple {593#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {593#true} is VALID [2022-02-20 18:11:57,881 INFO L290 TraceCheckUtils]: 3: Hoare triple {593#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {593#true} is VALID [2022-02-20 18:11:57,881 INFO L290 TraceCheckUtils]: 4: Hoare triple {593#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {593#true} is VALID [2022-02-20 18:11:57,881 INFO L290 TraceCheckUtils]: 5: Hoare triple {593#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {593#true} is VALID [2022-02-20 18:11:57,887 INFO L290 TraceCheckUtils]: 6: Hoare triple {593#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {593#true} is VALID [2022-02-20 18:11:57,887 INFO L290 TraceCheckUtils]: 7: Hoare triple {593#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {595#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:57,888 INFO L290 TraceCheckUtils]: 8: Hoare triple {595#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {595#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:57,889 INFO L290 TraceCheckUtils]: 9: Hoare triple {595#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {594#false} is VALID [2022-02-20 18:11:57,889 INFO L272 TraceCheckUtils]: 10: Hoare triple {594#false} call cleanup(); {594#false} is VALID [2022-02-20 18:11:57,889 INFO L290 TraceCheckUtils]: 11: Hoare triple {594#false} havoc ~i~0;havoc ~__cil_tmp2~0; {594#false} is VALID [2022-02-20 18:11:57,889 INFO L272 TraceCheckUtils]: 12: Hoare triple {594#false} call timeShift(); {594#false} is VALID [2022-02-20 18:11:57,889 INFO L290 TraceCheckUtils]: 13: Hoare triple {594#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {594#false} is VALID [2022-02-20 18:11:57,890 INFO L272 TraceCheckUtils]: 14: Hoare triple {594#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {593#true} is VALID [2022-02-20 18:11:57,890 INFO L290 TraceCheckUtils]: 15: Hoare triple {593#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {593#true} is VALID [2022-02-20 18:11:57,890 INFO L290 TraceCheckUtils]: 16: Hoare triple {593#true} assume true; {593#true} is VALID [2022-02-20 18:11:57,890 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {593#true} {594#false} #227#return; {594#false} is VALID [2022-02-20 18:11:57,890 INFO L290 TraceCheckUtils]: 18: Hoare triple {594#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {594#false} is VALID [2022-02-20 18:11:57,890 INFO L290 TraceCheckUtils]: 19: Hoare triple {594#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {594#false} is VALID [2022-02-20 18:11:57,891 INFO L290 TraceCheckUtils]: 20: Hoare triple {594#false} assume !(0 != ~pumpRunning~0); {594#false} is VALID [2022-02-20 18:11:57,891 INFO L290 TraceCheckUtils]: 21: Hoare triple {594#false} assume !(0 != ~systemActive~0); {594#false} is VALID [2022-02-20 18:11:57,891 INFO L290 TraceCheckUtils]: 22: Hoare triple {594#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {594#false} is VALID [2022-02-20 18:11:57,891 INFO L290 TraceCheckUtils]: 23: Hoare triple {594#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {594#false} is VALID [2022-02-20 18:11:57,891 INFO L290 TraceCheckUtils]: 24: Hoare triple {594#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {594#false} is VALID [2022-02-20 18:11:57,891 INFO L272 TraceCheckUtils]: 25: Hoare triple {594#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {593#true} is VALID [2022-02-20 18:11:57,892 INFO L290 TraceCheckUtils]: 26: Hoare triple {593#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {593#true} is VALID [2022-02-20 18:11:57,892 INFO L290 TraceCheckUtils]: 27: Hoare triple {593#true} assume true; {593#true} is VALID [2022-02-20 18:11:57,892 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {593#true} {594#false} #233#return; {594#false} is VALID [2022-02-20 18:11:57,892 INFO L290 TraceCheckUtils]: 29: Hoare triple {594#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {594#false} is VALID [2022-02-20 18:11:57,892 INFO L290 TraceCheckUtils]: 30: Hoare triple {594#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {594#false} is VALID [2022-02-20 18:11:57,892 INFO L290 TraceCheckUtils]: 31: Hoare triple {594#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {594#false} is VALID [2022-02-20 18:11:57,893 INFO L290 TraceCheckUtils]: 32: Hoare triple {594#false} assume !false; {594#false} is VALID [2022-02-20 18:11:57,893 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:57,893 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:57,893 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150473056] [2022-02-20 18:11:57,896 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150473056] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:57,896 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:57,896 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:57,896 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1022812166] [2022-02-20 18:11:57,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:57,898 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:11:57,898 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:57,899 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:57,926 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:57,926 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:57,926 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:57,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:57,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:57,928 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,017 INFO L93 Difference]: Finished difference Result 112 states and 143 transitions. [2022-02-20 18:11:58,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:58,022 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:11:58,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:58,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 143 transitions. [2022-02-20 18:11:58,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 143 transitions. [2022-02-20 18:11:58,028 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 143 transitions. [2022-02-20 18:11:58,130 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 143 edges. 143 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,135 INFO L225 Difference]: With dead ends: 112 [2022-02-20 18:11:58,135 INFO L226 Difference]: Without dead ends: 67 [2022-02-20 18:11:58,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:58,141 INFO L933 BasicCegarLoop]: 84 mSDtfsCounter, 18 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:58,141 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 146 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:58,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2022-02-20 18:11:58,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2022-02-20 18:11:58,146 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:58,146 INFO L82 GeneralOperation]: Start isEquivalent. First operand 67 states. Second operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:11:58,146 INFO L74 IsIncluded]: Start isIncluded. First operand 67 states. Second operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:11:58,147 INFO L87 Difference]: Start difference. First operand 67 states. Second operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:11:58,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,155 INFO L93 Difference]: Finished difference Result 67 states and 85 transitions. [2022-02-20 18:11:58,155 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 85 transitions. [2022-02-20 18:11:58,156 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:58,156 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:58,156 INFO L74 IsIncluded]: Start isIncluded. First operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Second operand 67 states. [2022-02-20 18:11:58,156 INFO L87 Difference]: Start difference. First operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) Second operand 67 states. [2022-02-20 18:11:58,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,158 INFO L93 Difference]: Finished difference Result 67 states and 85 transitions. [2022-02-20 18:11:58,158 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 85 transitions. [2022-02-20 18:11:58,159 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:58,159 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:58,159 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:58,159 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:58,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-02-20 18:11:58,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 85 transitions. [2022-02-20 18:11:58,162 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 85 transitions. Word has length 33 [2022-02-20 18:11:58,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:58,162 INFO L470 AbstractCegarLoop]: Abstraction has 67 states and 85 transitions. [2022-02-20 18:11:58,162 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,162 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 85 transitions. [2022-02-20 18:11:58,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-02-20 18:11:58,163 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:58,163 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:58,164 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:11:58,164 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:58,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:58,164 INFO L85 PathProgramCache]: Analyzing trace with hash 1250979301, now seen corresponding path program 1 times [2022-02-20 18:11:58,164 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:58,165 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6227430] [2022-02-20 18:11:58,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:58,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:58,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:58,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {995#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {995#true} is VALID [2022-02-20 18:11:58,225 INFO L290 TraceCheckUtils]: 1: Hoare triple {995#true} assume true; {995#true} is VALID [2022-02-20 18:11:58,225 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {995#true} {997#(= 1 ~systemActive~0)} #227#return; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-02-20 18:11:58,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,230 INFO L290 TraceCheckUtils]: 0: Hoare triple {995#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {995#true} is VALID [2022-02-20 18:11:58,231 INFO L290 TraceCheckUtils]: 1: Hoare triple {995#true} assume true; {995#true} is VALID [2022-02-20 18:11:58,231 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {995#true} {996#false} #233#return; {996#false} is VALID [2022-02-20 18:11:58,233 INFO L290 TraceCheckUtils]: 0: Hoare triple {995#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,233 INFO L290 TraceCheckUtils]: 1: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,233 INFO L290 TraceCheckUtils]: 2: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,234 INFO L290 TraceCheckUtils]: 3: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,234 INFO L290 TraceCheckUtils]: 4: Hoare triple {997#(= 1 ~systemActive~0)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,235 INFO L290 TraceCheckUtils]: 5: Hoare triple {997#(= 1 ~systemActive~0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,235 INFO L290 TraceCheckUtils]: 6: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,235 INFO L290 TraceCheckUtils]: 7: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,236 INFO L290 TraceCheckUtils]: 8: Hoare triple {997#(= 1 ~systemActive~0)} assume !false; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,236 INFO L290 TraceCheckUtils]: 9: Hoare triple {997#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,236 INFO L290 TraceCheckUtils]: 10: Hoare triple {997#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,237 INFO L290 TraceCheckUtils]: 11: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5#1); {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,237 INFO L290 TraceCheckUtils]: 12: Hoare triple {997#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,238 INFO L290 TraceCheckUtils]: 13: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,238 INFO L290 TraceCheckUtils]: 14: Hoare triple {997#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,238 INFO L290 TraceCheckUtils]: 15: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,239 INFO L290 TraceCheckUtils]: 16: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___1~0#1); {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,239 INFO L272 TraceCheckUtils]: 17: Hoare triple {997#(= 1 ~systemActive~0)} call timeShift(); {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,240 INFO L290 TraceCheckUtils]: 18: Hoare triple {997#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,240 INFO L272 TraceCheckUtils]: 19: Hoare triple {997#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {995#true} is VALID [2022-02-20 18:11:58,240 INFO L290 TraceCheckUtils]: 20: Hoare triple {995#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {995#true} is VALID [2022-02-20 18:11:58,240 INFO L290 TraceCheckUtils]: 21: Hoare triple {995#true} assume true; {995#true} is VALID [2022-02-20 18:11:58,242 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {995#true} {997#(= 1 ~systemActive~0)} #227#return; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,242 INFO L290 TraceCheckUtils]: 23: Hoare triple {997#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,243 INFO L290 TraceCheckUtils]: 24: Hoare triple {997#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,243 INFO L290 TraceCheckUtils]: 25: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {997#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:58,243 INFO L290 TraceCheckUtils]: 26: Hoare triple {997#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {996#false} is VALID [2022-02-20 18:11:58,243 INFO L290 TraceCheckUtils]: 27: Hoare triple {996#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {996#false} is VALID [2022-02-20 18:11:58,244 INFO L290 TraceCheckUtils]: 28: Hoare triple {996#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {996#false} is VALID [2022-02-20 18:11:58,244 INFO L290 TraceCheckUtils]: 29: Hoare triple {996#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {996#false} is VALID [2022-02-20 18:11:58,244 INFO L272 TraceCheckUtils]: 30: Hoare triple {996#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {995#true} is VALID [2022-02-20 18:11:58,244 INFO L290 TraceCheckUtils]: 31: Hoare triple {995#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {995#true} is VALID [2022-02-20 18:11:58,244 INFO L290 TraceCheckUtils]: 32: Hoare triple {995#true} assume true; {995#true} is VALID [2022-02-20 18:11:58,244 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {995#true} {996#false} #233#return; {996#false} is VALID [2022-02-20 18:11:58,245 INFO L290 TraceCheckUtils]: 34: Hoare triple {996#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {996#false} is VALID [2022-02-20 18:11:58,245 INFO L290 TraceCheckUtils]: 35: Hoare triple {996#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {996#false} is VALID [2022-02-20 18:11:58,245 INFO L290 TraceCheckUtils]: 36: Hoare triple {996#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {996#false} is VALID [2022-02-20 18:11:58,245 INFO L290 TraceCheckUtils]: 37: Hoare triple {996#false} assume !false; {996#false} is VALID [2022-02-20 18:11:58,245 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:58,246 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:58,246 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6227430] [2022-02-20 18:11:58,246 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6227430] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:58,246 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:58,246 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:58,246 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2023930972] [2022-02-20 18:11:58,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:58,247 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-02-20 18:11:58,247 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:58,247 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:58,268 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,269 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:58,269 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:58,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:58,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:58,270 INFO L87 Difference]: Start difference. First operand 67 states and 85 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:58,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,386 INFO L93 Difference]: Finished difference Result 183 states and 238 transitions. [2022-02-20 18:11:58,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:58,386 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-02-20 18:11:58,386 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:58,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:58,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 238 transitions. [2022-02-20 18:11:58,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:58,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 238 transitions. [2022-02-20 18:11:58,392 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 238 transitions. [2022-02-20 18:11:58,532 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 238 edges. 238 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,536 INFO L225 Difference]: With dead ends: 183 [2022-02-20 18:11:58,536 INFO L226 Difference]: Without dead ends: 124 [2022-02-20 18:11:58,536 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:58,537 INFO L933 BasicCegarLoop]: 104 mSDtfsCounter, 58 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 6 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:58,538 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [58 Valid, 176 Invalid, 6 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:58,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2022-02-20 18:11:58,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 119. [2022-02-20 18:11:58,547 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:58,547 INFO L82 GeneralOperation]: Start isEquivalent. First operand 124 states. Second operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:11:58,548 INFO L74 IsIncluded]: Start isIncluded. First operand 124 states. Second operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:11:58,548 INFO L87 Difference]: Start difference. First operand 124 states. Second operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:11:58,552 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,552 INFO L93 Difference]: Finished difference Result 124 states and 159 transitions. [2022-02-20 18:11:58,552 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 159 transitions. [2022-02-20 18:11:58,552 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:58,552 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:58,553 INFO L74 IsIncluded]: Start isIncluded. First operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand 124 states. [2022-02-20 18:11:58,553 INFO L87 Difference]: Start difference. First operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand 124 states. [2022-02-20 18:11:58,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,557 INFO L93 Difference]: Finished difference Result 124 states and 159 transitions. [2022-02-20 18:11:58,557 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 159 transitions. [2022-02-20 18:11:58,557 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:58,557 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:58,557 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:58,557 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:58,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 94 states have (on average 1.3404255319148937) internal successors, (126), 103 states have internal predecessors, (126), 14 states have call successors, (14), 10 states have call predecessors, (14), 10 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:11:58,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 154 transitions. [2022-02-20 18:11:58,573 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 154 transitions. Word has length 38 [2022-02-20 18:11:58,573 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:58,573 INFO L470 AbstractCegarLoop]: Abstraction has 119 states and 154 transitions. [2022-02-20 18:11:58,574 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:58,574 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 154 transitions. [2022-02-20 18:11:58,574 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-20 18:11:58,575 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:58,575 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:58,575 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:11:58,575 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:58,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:58,575 INFO L85 PathProgramCache]: Analyzing trace with hash 177136733, now seen corresponding path program 1 times [2022-02-20 18:11:58,576 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:58,576 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [784403804] [2022-02-20 18:11:58,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:58,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:58,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:11:58,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,654 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1681#true} is VALID [2022-02-20 18:11:58,661 INFO L290 TraceCheckUtils]: 1: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:11:58,662 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1681#true} {1683#(= ~pumpRunning~0 0)} #227#return; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-02-20 18:11:58,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,675 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:11:58,676 INFO L290 TraceCheckUtils]: 1: Hoare triple {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:11:58,677 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} {1683#(= ~pumpRunning~0 0)} #233#return; {1690#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret46#1|)} is VALID [2022-02-20 18:11:58,678 INFO L290 TraceCheckUtils]: 0: Hoare triple {1681#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,678 INFO L290 TraceCheckUtils]: 1: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,679 INFO L290 TraceCheckUtils]: 2: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,679 INFO L290 TraceCheckUtils]: 3: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,680 INFO L290 TraceCheckUtils]: 4: Hoare triple {1683#(= ~pumpRunning~0 0)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,680 INFO L290 TraceCheckUtils]: 5: Hoare triple {1683#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,680 INFO L290 TraceCheckUtils]: 6: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,681 INFO L290 TraceCheckUtils]: 7: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,681 INFO L290 TraceCheckUtils]: 8: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !false; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,681 INFO L290 TraceCheckUtils]: 9: Hoare triple {1683#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,682 INFO L290 TraceCheckUtils]: 10: Hoare triple {1683#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,682 INFO L290 TraceCheckUtils]: 11: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,682 INFO L290 TraceCheckUtils]: 12: Hoare triple {1683#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,683 INFO L290 TraceCheckUtils]: 13: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,683 INFO L290 TraceCheckUtils]: 14: Hoare triple {1683#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,683 INFO L290 TraceCheckUtils]: 15: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,684 INFO L290 TraceCheckUtils]: 16: Hoare triple {1683#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,684 INFO L290 TraceCheckUtils]: 17: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,685 INFO L290 TraceCheckUtils]: 18: Hoare triple {1683#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,685 INFO L290 TraceCheckUtils]: 19: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,686 INFO L272 TraceCheckUtils]: 20: Hoare triple {1683#(= ~pumpRunning~0 0)} call timeShift(); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,686 INFO L290 TraceCheckUtils]: 21: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,686 INFO L272 TraceCheckUtils]: 22: Hoare triple {1683#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {1681#true} is VALID [2022-02-20 18:11:58,686 INFO L290 TraceCheckUtils]: 23: Hoare triple {1681#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1681#true} is VALID [2022-02-20 18:11:58,686 INFO L290 TraceCheckUtils]: 24: Hoare triple {1681#true} assume true; {1681#true} is VALID [2022-02-20 18:11:58,687 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {1681#true} {1683#(= ~pumpRunning~0 0)} #227#return; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,687 INFO L290 TraceCheckUtils]: 26: Hoare triple {1683#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,688 INFO L290 TraceCheckUtils]: 27: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,688 INFO L290 TraceCheckUtils]: 28: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,688 INFO L290 TraceCheckUtils]: 29: Hoare triple {1683#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,689 INFO L290 TraceCheckUtils]: 30: Hoare triple {1683#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,689 INFO L290 TraceCheckUtils]: 31: Hoare triple {1683#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,690 INFO L290 TraceCheckUtils]: 32: Hoare triple {1683#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {1683#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:11:58,690 INFO L272 TraceCheckUtils]: 33: Hoare triple {1683#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {1681#true} is VALID [2022-02-20 18:11:58,690 INFO L290 TraceCheckUtils]: 34: Hoare triple {1681#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:11:58,691 INFO L290 TraceCheckUtils]: 35: Hoare triple {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:11:58,691 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {1692#(= ~pumpRunning~0 |isPumpRunning_#res|)} {1683#(= ~pumpRunning~0 0)} #233#return; {1690#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret46#1|)} is VALID [2022-02-20 18:11:58,692 INFO L290 TraceCheckUtils]: 37: Hoare triple {1690#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret46#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {1691#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:11:58,692 INFO L290 TraceCheckUtils]: 38: Hoare triple {1691#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {1682#false} is VALID [2022-02-20 18:11:58,692 INFO L290 TraceCheckUtils]: 39: Hoare triple {1682#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1682#false} is VALID [2022-02-20 18:11:58,693 INFO L290 TraceCheckUtils]: 40: Hoare triple {1682#false} assume !false; {1682#false} is VALID [2022-02-20 18:11:58,693 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:11:58,693 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:58,693 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [784403804] [2022-02-20 18:11:58,693 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [784403804] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:58,694 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:58,694 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:11:58,694 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084796497] [2022-02-20 18:11:58,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:58,695 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:11:58,695 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:58,695 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,721 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,722 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:11:58,722 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:58,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:11:58,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:11:58,723 INFO L87 Difference]: Start difference. First operand 119 states and 154 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,969 INFO L93 Difference]: Finished difference Result 324 states and 428 transitions. [2022-02-20 18:11:58,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:11:58,969 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:11:58,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:58,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 228 transitions. [2022-02-20 18:11:58,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 228 transitions. [2022-02-20 18:11:58,975 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 228 transitions. [2022-02-20 18:11:59,107 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 228 edges. 228 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,113 INFO L225 Difference]: With dead ends: 324 [2022-02-20 18:11:59,113 INFO L226 Difference]: Without dead ends: 213 [2022-02-20 18:11:59,115 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:11:59,122 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 42 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 408 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,124 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [43 Valid, 408 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-02-20 18:11:59,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 201. [2022-02-20 18:11:59,138 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,139 INFO L82 GeneralOperation]: Start isEquivalent. First operand 213 states. Second operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,139 INFO L74 IsIncluded]: Start isIncluded. First operand 213 states. Second operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,140 INFO L87 Difference]: Start difference. First operand 213 states. Second operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,160 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,160 INFO L93 Difference]: Finished difference Result 213 states and 271 transitions. [2022-02-20 18:11:59,160 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 271 transitions. [2022-02-20 18:11:59,161 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,161 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,162 INFO L74 IsIncluded]: Start isIncluded. First operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 213 states. [2022-02-20 18:11:59,162 INFO L87 Difference]: Start difference. First operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 213 states. [2022-02-20 18:11:59,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,172 INFO L93 Difference]: Finished difference Result 213 states and 271 transitions. [2022-02-20 18:11:59,172 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 271 transitions. [2022-02-20 18:11:59,172 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,172 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,173 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,173 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 156 states have (on average 1.3012820512820513) internal successors, (203), 167 states have internal predecessors, (203), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 255 transitions. [2022-02-20 18:11:59,180 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 255 transitions. Word has length 41 [2022-02-20 18:11:59,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,180 INFO L470 AbstractCegarLoop]: Abstraction has 201 states and 255 transitions. [2022-02-20 18:11:59,180 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,180 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 255 transitions. [2022-02-20 18:11:59,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:11:59,181 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,181 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,182 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:11:59,182 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,182 INFO L85 PathProgramCache]: Analyzing trace with hash -413128686, now seen corresponding path program 1 times [2022-02-20 18:11:59,182 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,183 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1954026552] [2022-02-20 18:11:59,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:59,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:59,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,236 INFO L290 TraceCheckUtils]: 0: Hoare triple {2863#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2863#true} is VALID [2022-02-20 18:11:59,236 INFO L290 TraceCheckUtils]: 1: Hoare triple {2863#true} assume true; {2863#true} is VALID [2022-02-20 18:11:59,236 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2863#true} {2863#true} #227#return; {2863#true} is VALID [2022-02-20 18:11:59,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:11:59,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {2863#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2863#true} is VALID [2022-02-20 18:11:59,239 INFO L290 TraceCheckUtils]: 1: Hoare triple {2863#true} assume true; {2863#true} is VALID [2022-02-20 18:11:59,239 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2863#true} {2864#false} #233#return; {2864#false} is VALID [2022-02-20 18:11:59,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {2863#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 1: Hoare triple {2863#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 2: Hoare triple {2863#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 3: Hoare triple {2863#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 4: Hoare triple {2863#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 5: Hoare triple {2863#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 6: Hoare triple {2863#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2863#true} is VALID [2022-02-20 18:11:59,240 INFO L290 TraceCheckUtils]: 7: Hoare triple {2863#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 8: Hoare triple {2863#true} assume !false; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 9: Hoare triple {2863#true} assume test_~splverifierCounter~0#1 < 4; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 10: Hoare triple {2863#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 11: Hoare triple {2863#true} assume !(0 != test_~tmp~5#1); {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 12: Hoare triple {2863#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 13: Hoare triple {2863#true} assume !(0 != test_~tmp___0~1#1); {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 14: Hoare triple {2863#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {2863#true} is VALID [2022-02-20 18:11:59,241 INFO L290 TraceCheckUtils]: 15: Hoare triple {2863#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L290 TraceCheckUtils]: 16: Hoare triple {2863#true} assume !(0 != test_~tmp___1~0#1); {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L272 TraceCheckUtils]: 17: Hoare triple {2863#true} call timeShift(); {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L290 TraceCheckUtils]: 18: Hoare triple {2863#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L272 TraceCheckUtils]: 19: Hoare triple {2863#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L290 TraceCheckUtils]: 20: Hoare triple {2863#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L290 TraceCheckUtils]: 21: Hoare triple {2863#true} assume true; {2863#true} is VALID [2022-02-20 18:11:59,242 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {2863#true} {2863#true} #227#return; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 23: Hoare triple {2863#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 24: Hoare triple {2863#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 25: Hoare triple {2863#true} assume !(0 != ~pumpRunning~0); {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 26: Hoare triple {2863#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 27: Hoare triple {2863#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 28: Hoare triple {2863#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {2863#true} is VALID [2022-02-20 18:11:59,243 INFO L290 TraceCheckUtils]: 29: Hoare triple {2863#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {2863#true} is VALID [2022-02-20 18:11:59,246 INFO L290 TraceCheckUtils]: 30: Hoare triple {2863#true} assume 0 != isHighWaterLevel_~tmp~1#1;isHighWaterLevel_~tmp___0~0#1 := 0; {2868#(= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:11:59,246 INFO L290 TraceCheckUtils]: 31: Hoare triple {2868#(= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {2869#(= |timeShift_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:11:59,246 INFO L290 TraceCheckUtils]: 32: Hoare triple {2869#(= |timeShift_isHighWaterLevel_#res#1| 0)} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {2870#(= |timeShift_processEnvironment_~tmp~0#1| 0)} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 33: Hoare triple {2870#(= |timeShift_processEnvironment_~tmp~0#1| 0)} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 34: Hoare triple {2864#false} assume { :end_inline_activatePump } true; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 35: Hoare triple {2864#false} assume { :end_inline_processEnvironment } true; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 36: Hoare triple {2864#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 37: Hoare triple {2864#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L290 TraceCheckUtils]: 38: Hoare triple {2864#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {2864#false} is VALID [2022-02-20 18:11:59,247 INFO L272 TraceCheckUtils]: 39: Hoare triple {2864#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {2863#true} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 40: Hoare triple {2863#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2863#true} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 41: Hoare triple {2863#true} assume true; {2863#true} is VALID [2022-02-20 18:11:59,248 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {2863#true} {2864#false} #233#return; {2864#false} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 43: Hoare triple {2864#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {2864#false} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 44: Hoare triple {2864#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {2864#false} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 45: Hoare triple {2864#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {2864#false} is VALID [2022-02-20 18:11:59,248 INFO L290 TraceCheckUtils]: 46: Hoare triple {2864#false} assume !false; {2864#false} is VALID [2022-02-20 18:11:59,249 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:59,249 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:59,249 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1954026552] [2022-02-20 18:11:59,249 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1954026552] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:59,249 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:59,249 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:11:59,249 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066651567] [2022-02-20 18:11:59,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:59,250 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:11:59,250 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:59,250 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,272 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,272 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:11:59,272 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:59,273 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:11:59,273 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:59,273 INFO L87 Difference]: Start difference. First operand 201 states and 255 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,449 INFO L93 Difference]: Finished difference Result 431 states and 556 transitions. [2022-02-20 18:11:59,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:11:59,449 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:11:59,449 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:59,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 193 transitions. [2022-02-20 18:11:59,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 193 transitions. [2022-02-20 18:11:59,453 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 193 transitions. [2022-02-20 18:11:59,555 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 193 edges. 193 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,560 INFO L225 Difference]: With dead ends: 431 [2022-02-20 18:11:59,560 INFO L226 Difference]: Without dead ends: 238 [2022-02-20 18:11:59,561 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:11:59,561 INFO L933 BasicCegarLoop]: 105 mSDtfsCounter, 35 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,561 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [37 Valid, 379 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2022-02-20 18:11:59,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 207. [2022-02-20 18:11:59,571 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,572 INFO L82 GeneralOperation]: Start isEquivalent. First operand 238 states. Second operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,573 INFO L74 IsIncluded]: Start isIncluded. First operand 238 states. Second operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,573 INFO L87 Difference]: Start difference. First operand 238 states. Second operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,579 INFO L93 Difference]: Finished difference Result 238 states and 303 transitions. [2022-02-20 18:11:59,579 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 303 transitions. [2022-02-20 18:11:59,580 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,580 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,580 INFO L74 IsIncluded]: Start isIncluded. First operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 238 states. [2022-02-20 18:11:59,581 INFO L87 Difference]: Start difference. First operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 238 states. [2022-02-20 18:11:59,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,587 INFO L93 Difference]: Finished difference Result 238 states and 303 transitions. [2022-02-20 18:11:59,587 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 303 transitions. [2022-02-20 18:11:59,588 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,588 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,588 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,588 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 162 states have (on average 1.2901234567901234) internal successors, (209), 173 states have internal predecessors, (209), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 261 transitions. [2022-02-20 18:11:59,594 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 261 transitions. Word has length 47 [2022-02-20 18:11:59,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,594 INFO L470 AbstractCegarLoop]: Abstraction has 207 states and 261 transitions. [2022-02-20 18:11:59,594 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,594 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 261 transitions. [2022-02-20 18:11:59,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:11:59,595 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,595 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,595 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:11:59,595 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,595 INFO L85 PathProgramCache]: Analyzing trace with hash -2001476588, now seen corresponding path program 1 times [2022-02-20 18:11:59,595 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,595 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1358262910] [2022-02-20 18:11:59,596 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,596 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:59,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:11:59,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,639 INFO L290 TraceCheckUtils]: 0: Hoare triple {4249#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {4249#true} is VALID [2022-02-20 18:11:59,639 INFO L290 TraceCheckUtils]: 1: Hoare triple {4249#true} assume true; {4249#true} is VALID [2022-02-20 18:11:59,639 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4249#true} {4249#true} #227#return; {4249#true} is VALID [2022-02-20 18:11:59,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:11:59,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {4249#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 1: Hoare triple {4249#true} assume true; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4249#true} {4250#false} #233#return; {4250#false} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 0: Hoare triple {4249#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 1: Hoare triple {4249#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 2: Hoare triple {4249#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 3: Hoare triple {4249#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 4: Hoare triple {4249#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 5: Hoare triple {4249#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 6: Hoare triple {4249#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 7: Hoare triple {4249#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 8: Hoare triple {4249#true} assume !false; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 9: Hoare triple {4249#true} assume test_~splverifierCounter~0#1 < 4; {4249#true} is VALID [2022-02-20 18:11:59,642 INFO L290 TraceCheckUtils]: 10: Hoare triple {4249#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 11: Hoare triple {4249#true} assume !(0 != test_~tmp~5#1); {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 12: Hoare triple {4249#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 13: Hoare triple {4249#true} assume !(0 != test_~tmp___0~1#1); {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 14: Hoare triple {4249#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 15: Hoare triple {4249#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 16: Hoare triple {4249#true} assume !(0 != test_~tmp___1~0#1); {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L272 TraceCheckUtils]: 17: Hoare triple {4249#true} call timeShift(); {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 18: Hoare triple {4249#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L272 TraceCheckUtils]: 19: Hoare triple {4249#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 20: Hoare triple {4249#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 21: Hoare triple {4249#true} assume true; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {4249#true} {4249#true} #227#return; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 23: Hoare triple {4249#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 24: Hoare triple {4249#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {4249#true} is VALID [2022-02-20 18:11:59,643 INFO L290 TraceCheckUtils]: 25: Hoare triple {4249#true} assume !(0 != ~pumpRunning~0); {4249#true} is VALID [2022-02-20 18:11:59,644 INFO L290 TraceCheckUtils]: 26: Hoare triple {4249#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {4249#true} is VALID [2022-02-20 18:11:59,644 INFO L290 TraceCheckUtils]: 27: Hoare triple {4249#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {4249#true} is VALID [2022-02-20 18:11:59,644 INFO L290 TraceCheckUtils]: 28: Hoare triple {4249#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {4254#(= |timeShift_isHighWaterSensorDry_#res#1| 1)} is VALID [2022-02-20 18:11:59,644 INFO L290 TraceCheckUtils]: 29: Hoare triple {4254#(= |timeShift_isHighWaterSensorDry_#res#1| 1)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {4255#(= 0 (+ |timeShift_isHighWaterLevel_~tmp~1#1| (- 1)))} is VALID [2022-02-20 18:11:59,645 INFO L290 TraceCheckUtils]: 30: Hoare triple {4255#(= 0 (+ |timeShift_isHighWaterLevel_~tmp~1#1| (- 1)))} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {4250#false} is VALID [2022-02-20 18:11:59,645 INFO L290 TraceCheckUtils]: 31: Hoare triple {4250#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {4250#false} is VALID [2022-02-20 18:11:59,645 INFO L290 TraceCheckUtils]: 32: Hoare triple {4250#false} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {4250#false} is VALID [2022-02-20 18:11:59,645 INFO L290 TraceCheckUtils]: 33: Hoare triple {4250#false} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4250#false} is VALID [2022-02-20 18:11:59,645 INFO L290 TraceCheckUtils]: 34: Hoare triple {4250#false} assume { :end_inline_activatePump } true; {4250#false} is VALID [2022-02-20 18:11:59,663 INFO L290 TraceCheckUtils]: 35: Hoare triple {4250#false} assume { :end_inline_processEnvironment } true; {4250#false} is VALID [2022-02-20 18:11:59,663 INFO L290 TraceCheckUtils]: 36: Hoare triple {4250#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {4250#false} is VALID [2022-02-20 18:11:59,663 INFO L290 TraceCheckUtils]: 37: Hoare triple {4250#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {4250#false} is VALID [2022-02-20 18:11:59,663 INFO L290 TraceCheckUtils]: 38: Hoare triple {4250#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L272 TraceCheckUtils]: 39: Hoare triple {4250#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {4249#true} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 40: Hoare triple {4249#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {4249#true} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 41: Hoare triple {4249#true} assume true; {4249#true} is VALID [2022-02-20 18:11:59,664 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {4249#true} {4250#false} #233#return; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 43: Hoare triple {4250#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 44: Hoare triple {4250#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 45: Hoare triple {4250#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L290 TraceCheckUtils]: 46: Hoare triple {4250#false} assume !false; {4250#false} is VALID [2022-02-20 18:11:59,664 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:59,664 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:59,664 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1358262910] [2022-02-20 18:11:59,664 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1358262910] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:59,664 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:59,665 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-20 18:11:59,665 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2012638097] [2022-02-20 18:11:59,665 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:59,665 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:11:59,665 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:59,665 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,689 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,689 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-20 18:11:59,689 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:59,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-20 18:11:59,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-20 18:11:59,690 INFO L87 Difference]: Start difference. First operand 207 states and 261 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,823 INFO L93 Difference]: Finished difference Result 438 states and 564 transitions. [2022-02-20 18:11:59,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-20 18:11:59,823 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:11:59,823 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:59,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 183 transitions. [2022-02-20 18:11:59,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 183 transitions. [2022-02-20 18:11:59,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 183 transitions. [2022-02-20 18:11:59,934 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 183 edges. 183 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,950 INFO L225 Difference]: With dead ends: 438 [2022-02-20 18:11:59,951 INFO L226 Difference]: Without dead ends: 239 [2022-02-20 18:11:59,951 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:11:59,952 INFO L933 BasicCegarLoop]: 96 mSDtfsCounter, 27 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 262 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,952 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [27 Valid, 262 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,953 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2022-02-20 18:11:59,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 211. [2022-02-20 18:11:59,961 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,961 INFO L82 GeneralOperation]: Start isEquivalent. First operand 239 states. Second operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,961 INFO L74 IsIncluded]: Start isIncluded. First operand 239 states. Second operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,962 INFO L87 Difference]: Start difference. First operand 239 states. Second operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,973 INFO L93 Difference]: Finished difference Result 239 states and 301 transitions. [2022-02-20 18:11:59,973 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 301 transitions. [2022-02-20 18:11:59,974 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,974 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,974 INFO L74 IsIncluded]: Start isIncluded. First operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 239 states. [2022-02-20 18:11:59,975 INFO L87 Difference]: Start difference. First operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) Second operand 239 states. [2022-02-20 18:11:59,980 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,980 INFO L93 Difference]: Finished difference Result 239 states and 301 transitions. [2022-02-20 18:11:59,980 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 301 transitions. [2022-02-20 18:11:59,980 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,981 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,981 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,981 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,981 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 211 states, 166 states have (on average 1.283132530120482) internal successors, (213), 177 states have internal predecessors, (213), 24 states have call successors, (24), 20 states have call predecessors, (24), 20 states have return successors, (28), 24 states have call predecessors, (28), 24 states have call successors, (28) [2022-02-20 18:11:59,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 211 states to 211 states and 265 transitions. [2022-02-20 18:11:59,985 INFO L78 Accepts]: Start accepts. Automaton has 211 states and 265 transitions. Word has length 47 [2022-02-20 18:11:59,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,985 INFO L470 AbstractCegarLoop]: Abstraction has 211 states and 265 transitions. [2022-02-20 18:11:59,985 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,986 INFO L276 IsEmpty]: Start isEmpty. Operand 211 states and 265 transitions. [2022-02-20 18:11:59,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:11:59,987 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,987 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:11:59,988 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,988 INFO L85 PathProgramCache]: Analyzing trace with hash 604546966, now seen corresponding path program 1 times [2022-02-20 18:11:59,988 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,989 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42355039] [2022-02-20 18:11:59,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:00,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-20 18:12:00,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,061 INFO L290 TraceCheckUtils]: 0: Hoare triple {5650#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5650#true} is VALID [2022-02-20 18:12:00,061 INFO L290 TraceCheckUtils]: 1: Hoare triple {5650#true} assume true; {5650#true} is VALID [2022-02-20 18:12:00,062 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5650#true} {5652#(= ~waterLevel~0 1)} #227#return; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:12:00,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,064 INFO L290 TraceCheckUtils]: 0: Hoare triple {5650#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5650#true} is VALID [2022-02-20 18:12:00,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {5650#true} assume true; {5650#true} is VALID [2022-02-20 18:12:00,065 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5650#true} {5651#false} #233#return; {5651#false} is VALID [2022-02-20 18:12:00,065 INFO L290 TraceCheckUtils]: 0: Hoare triple {5650#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,065 INFO L290 TraceCheckUtils]: 1: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,065 INFO L290 TraceCheckUtils]: 2: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,066 INFO L290 TraceCheckUtils]: 3: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,067 INFO L290 TraceCheckUtils]: 4: Hoare triple {5652#(= ~waterLevel~0 1)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,067 INFO L290 TraceCheckUtils]: 5: Hoare triple {5652#(= ~waterLevel~0 1)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,067 INFO L290 TraceCheckUtils]: 6: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,067 INFO L290 TraceCheckUtils]: 7: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,068 INFO L290 TraceCheckUtils]: 8: Hoare triple {5652#(= ~waterLevel~0 1)} assume !false; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,068 INFO L290 TraceCheckUtils]: 9: Hoare triple {5652#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,068 INFO L290 TraceCheckUtils]: 10: Hoare triple {5652#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,068 INFO L290 TraceCheckUtils]: 11: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~5#1); {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,069 INFO L290 TraceCheckUtils]: 12: Hoare triple {5652#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,069 INFO L290 TraceCheckUtils]: 13: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~1#1); {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,069 INFO L290 TraceCheckUtils]: 14: Hoare triple {5652#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,069 INFO L290 TraceCheckUtils]: 15: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,070 INFO L290 TraceCheckUtils]: 16: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___1~0#1); {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,070 INFO L272 TraceCheckUtils]: 17: Hoare triple {5652#(= ~waterLevel~0 1)} call timeShift(); {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,070 INFO L290 TraceCheckUtils]: 18: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,070 INFO L272 TraceCheckUtils]: 19: Hoare triple {5652#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {5650#true} is VALID [2022-02-20 18:12:00,070 INFO L290 TraceCheckUtils]: 20: Hoare triple {5650#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5650#true} is VALID [2022-02-20 18:12:00,070 INFO L290 TraceCheckUtils]: 21: Hoare triple {5650#true} assume true; {5650#true} is VALID [2022-02-20 18:12:00,071 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {5650#true} {5652#(= ~waterLevel~0 1)} #227#return; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,071 INFO L290 TraceCheckUtils]: 23: Hoare triple {5652#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,072 INFO L290 TraceCheckUtils]: 24: Hoare triple {5652#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,073 INFO L290 TraceCheckUtils]: 25: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,073 INFO L290 TraceCheckUtils]: 26: Hoare triple {5652#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,073 INFO L290 TraceCheckUtils]: 27: Hoare triple {5652#(= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5652#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,074 INFO L290 TraceCheckUtils]: 28: Hoare triple {5652#(= ~waterLevel~0 1)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5651#false} is VALID [2022-02-20 18:12:00,074 INFO L290 TraceCheckUtils]: 29: Hoare triple {5651#false} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 30: Hoare triple {5651#false} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 31: Hoare triple {5651#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 32: Hoare triple {5651#false} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 33: Hoare triple {5651#false} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 34: Hoare triple {5651#false} assume { :end_inline_activatePump } true; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 35: Hoare triple {5651#false} assume { :end_inline_processEnvironment } true; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 36: Hoare triple {5651#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 37: Hoare triple {5651#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 38: Hoare triple {5651#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L272 TraceCheckUtils]: 39: Hoare triple {5651#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {5650#true} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 40: Hoare triple {5650#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5650#true} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 41: Hoare triple {5650#true} assume true; {5650#true} is VALID [2022-02-20 18:12:00,075 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {5650#true} {5651#false} #233#return; {5651#false} is VALID [2022-02-20 18:12:00,075 INFO L290 TraceCheckUtils]: 43: Hoare triple {5651#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {5651#false} is VALID [2022-02-20 18:12:00,076 INFO L290 TraceCheckUtils]: 44: Hoare triple {5651#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {5651#false} is VALID [2022-02-20 18:12:00,076 INFO L290 TraceCheckUtils]: 45: Hoare triple {5651#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5651#false} is VALID [2022-02-20 18:12:00,076 INFO L290 TraceCheckUtils]: 46: Hoare triple {5651#false} assume !false; {5651#false} is VALID [2022-02-20 18:12:00,076 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:00,076 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:00,076 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42355039] [2022-02-20 18:12:00,076 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42355039] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:00,076 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:00,076 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:00,077 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163001416] [2022-02-20 18:12:00,077 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:00,078 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:12:00,078 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:00,078 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,101 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,101 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:00,102 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:00,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:00,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:00,102 INFO L87 Difference]: Start difference. First operand 211 states and 265 transitions. Second operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,199 INFO L93 Difference]: Finished difference Result 508 states and 643 transitions. [2022-02-20 18:12:00,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:00,199 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 47 [2022-02-20 18:12:00,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:00,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 224 transitions. [2022-02-20 18:12:00,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 224 transitions. [2022-02-20 18:12:00,214 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 224 transitions. [2022-02-20 18:12:00,334 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,340 INFO L225 Difference]: With dead ends: 508 [2022-02-20 18:12:00,340 INFO L226 Difference]: Without dead ends: 305 [2022-02-20 18:12:00,340 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:00,341 INFO L933 BasicCegarLoop]: 90 mSDtfsCounter, 39 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 39 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:00,341 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [39 Valid, 161 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:00,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-02-20 18:12:00,351 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 305. [2022-02-20 18:12:00,351 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:00,352 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2022-02-20 18:12:00,352 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2022-02-20 18:12:00,353 INFO L87 Difference]: Start difference. First operand 305 states. Second operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2022-02-20 18:12:00,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,358 INFO L93 Difference]: Finished difference Result 305 states and 376 transitions. [2022-02-20 18:12:00,359 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 376 transitions. [2022-02-20 18:12:00,359 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,359 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,360 INFO L74 IsIncluded]: Start isIncluded. First operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) Second operand 305 states. [2022-02-20 18:12:00,360 INFO L87 Difference]: Start difference. First operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) Second operand 305 states. [2022-02-20 18:12:00,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,366 INFO L93 Difference]: Finished difference Result 305 states and 376 transitions. [2022-02-20 18:12:00,367 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 376 transitions. [2022-02-20 18:12:00,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,367 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:00,367 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:00,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 305 states, 240 states have (on average 1.25) internal successors, (300), 253 states have internal predecessors, (300), 36 states have call successors, (36), 30 states have call predecessors, (36), 28 states have return successors, (40), 34 states have call predecessors, (40), 36 states have call successors, (40) [2022-02-20 18:12:00,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 376 transitions. [2022-02-20 18:12:00,375 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 376 transitions. Word has length 47 [2022-02-20 18:12:00,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:00,375 INFO L470 AbstractCegarLoop]: Abstraction has 305 states and 376 transitions. [2022-02-20 18:12:00,375 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 13.333333333333334) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,375 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 376 transitions. [2022-02-20 18:12:00,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:00,376 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:00,376 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:00,376 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:00,376 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:00,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:00,376 INFO L85 PathProgramCache]: Analyzing trace with hash -542316420, now seen corresponding path program 1 times [2022-02-20 18:12:00,376 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:00,377 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1446083802] [2022-02-20 18:12:00,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:00,377 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:00,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:00,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,466 INFO L290 TraceCheckUtils]: 0: Hoare triple {7425#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,467 INFO L290 TraceCheckUtils]: 1: Hoare triple {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,467 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7412#(= ~waterLevel~0 1)} #235#return; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:12:00,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,471 INFO L290 TraceCheckUtils]: 0: Hoare triple {7410#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7410#true} is VALID [2022-02-20 18:12:00,471 INFO L290 TraceCheckUtils]: 1: Hoare triple {7410#true} assume true; {7410#true} is VALID [2022-02-20 18:12:00,471 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7410#true} {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #227#return; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:00,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,473 INFO L290 TraceCheckUtils]: 0: Hoare triple {7410#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7410#true} is VALID [2022-02-20 18:12:00,474 INFO L290 TraceCheckUtils]: 1: Hoare triple {7410#true} assume true; {7410#true} is VALID [2022-02-20 18:12:00,474 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7410#true} {7411#false} #233#return; {7411#false} is VALID [2022-02-20 18:12:00,474 INFO L290 TraceCheckUtils]: 0: Hoare triple {7410#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,474 INFO L290 TraceCheckUtils]: 1: Hoare triple {7412#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,474 INFO L290 TraceCheckUtils]: 2: Hoare triple {7412#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,475 INFO L290 TraceCheckUtils]: 3: Hoare triple {7412#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,479 INFO L290 TraceCheckUtils]: 4: Hoare triple {7412#(= ~waterLevel~0 1)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,479 INFO L290 TraceCheckUtils]: 5: Hoare triple {7412#(= ~waterLevel~0 1)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,480 INFO L290 TraceCheckUtils]: 6: Hoare triple {7412#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,480 INFO L290 TraceCheckUtils]: 7: Hoare triple {7412#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,480 INFO L290 TraceCheckUtils]: 8: Hoare triple {7412#(= ~waterLevel~0 1)} assume !false; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,480 INFO L290 TraceCheckUtils]: 9: Hoare triple {7412#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,481 INFO L290 TraceCheckUtils]: 10: Hoare triple {7412#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,481 INFO L290 TraceCheckUtils]: 11: Hoare triple {7412#(= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {7412#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:00,481 INFO L272 TraceCheckUtils]: 12: Hoare triple {7412#(= ~waterLevel~0 1)} call waterRise(); {7425#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:00,482 INFO L290 TraceCheckUtils]: 13: Hoare triple {7425#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,482 INFO L290 TraceCheckUtils]: 14: Hoare triple {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,483 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {7426#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7412#(= ~waterLevel~0 1)} #235#return; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,483 INFO L290 TraceCheckUtils]: 16: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,483 INFO L290 TraceCheckUtils]: 17: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~1#1); {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,484 INFO L290 TraceCheckUtils]: 18: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,484 INFO L290 TraceCheckUtils]: 19: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,485 INFO L290 TraceCheckUtils]: 20: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___1~0#1); {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,485 INFO L272 TraceCheckUtils]: 21: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call timeShift(); {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,485 INFO L290 TraceCheckUtils]: 22: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,485 INFO L272 TraceCheckUtils]: 23: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {7410#true} is VALID [2022-02-20 18:12:00,485 INFO L290 TraceCheckUtils]: 24: Hoare triple {7410#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7410#true} is VALID [2022-02-20 18:12:00,485 INFO L290 TraceCheckUtils]: 25: Hoare triple {7410#true} assume true; {7410#true} is VALID [2022-02-20 18:12:00,486 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {7410#true} {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #227#return; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,486 INFO L290 TraceCheckUtils]: 27: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,486 INFO L290 TraceCheckUtils]: 28: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,487 INFO L290 TraceCheckUtils]: 29: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,487 INFO L290 TraceCheckUtils]: 30: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,487 INFO L290 TraceCheckUtils]: 31: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,488 INFO L290 TraceCheckUtils]: 32: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,488 INFO L290 TraceCheckUtils]: 33: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,488 INFO L290 TraceCheckUtils]: 34: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,489 INFO L290 TraceCheckUtils]: 35: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,489 INFO L290 TraceCheckUtils]: 36: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,489 INFO L290 TraceCheckUtils]: 37: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,490 INFO L290 TraceCheckUtils]: 38: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_activatePump } true; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,490 INFO L290 TraceCheckUtils]: 39: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:00,491 INFO L290 TraceCheckUtils]: 40: Hoare triple {7416#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {7420#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 41: Hoare triple {7420#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {7421#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 42: Hoare triple {7421#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {7411#false} is VALID [2022-02-20 18:12:00,492 INFO L272 TraceCheckUtils]: 43: Hoare triple {7411#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {7410#true} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 44: Hoare triple {7410#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7410#true} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 45: Hoare triple {7410#true} assume true; {7410#true} is VALID [2022-02-20 18:12:00,492 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {7410#true} {7411#false} #233#return; {7411#false} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 47: Hoare triple {7411#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {7411#false} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 48: Hoare triple {7411#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {7411#false} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 49: Hoare triple {7411#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {7411#false} is VALID [2022-02-20 18:12:00,492 INFO L290 TraceCheckUtils]: 50: Hoare triple {7411#false} assume !false; {7411#false} is VALID [2022-02-20 18:12:00,493 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:00,493 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:00,493 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1446083802] [2022-02-20 18:12:00,493 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1446083802] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:00,493 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:00,493 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-20 18:12:00,493 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501612424] [2022-02-20 18:12:00,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:00,494 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2022-02-20 18:12:00,494 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:00,494 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:00,522 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,522 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-20 18:12:00,522 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:00,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-20 18:12:00,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:00,523 INFO L87 Difference]: Start difference. First operand 305 states and 376 transitions. Second operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:01,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,461 INFO L93 Difference]: Finished difference Result 1038 states and 1325 transitions. [2022-02-20 18:12:01,461 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-02-20 18:12:01,462 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2022-02-20 18:12:01,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:01,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:01,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 380 transitions. [2022-02-20 18:12:01,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:01,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 380 transitions. [2022-02-20 18:12:01,469 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 15 states and 380 transitions. [2022-02-20 18:12:01,716 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 380 edges. 380 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,758 INFO L225 Difference]: With dead ends: 1038 [2022-02-20 18:12:01,758 INFO L226 Difference]: Without dead ends: 835 [2022-02-20 18:12:01,759 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=184, Unknown=0, NotChecked=0, Total=240 [2022-02-20 18:12:01,760 INFO L933 BasicCegarLoop]: 135 mSDtfsCounter, 228 mSDsluCounter, 533 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 237 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 337 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:01,760 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [237 Valid, 668 Invalid, 337 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:01,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 835 states. [2022-02-20 18:12:01,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 835 to 771. [2022-02-20 18:12:01,856 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:01,858 INFO L82 GeneralOperation]: Start isEquivalent. First operand 835 states. Second operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2022-02-20 18:12:01,860 INFO L74 IsIncluded]: Start isIncluded. First operand 835 states. Second operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2022-02-20 18:12:01,861 INFO L87 Difference]: Start difference. First operand 835 states. Second operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2022-02-20 18:12:01,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,889 INFO L93 Difference]: Finished difference Result 835 states and 1022 transitions. [2022-02-20 18:12:01,889 INFO L276 IsEmpty]: Start isEmpty. Operand 835 states and 1022 transitions. [2022-02-20 18:12:01,890 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,891 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,894 INFO L74 IsIncluded]: Start isIncluded. First operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) Second operand 835 states. [2022-02-20 18:12:01,895 INFO L87 Difference]: Start difference. First operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) Second operand 835 states. [2022-02-20 18:12:01,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,921 INFO L93 Difference]: Finished difference Result 835 states and 1022 transitions. [2022-02-20 18:12:01,921 INFO L276 IsEmpty]: Start isEmpty. Operand 835 states and 1022 transitions. [2022-02-20 18:12:01,923 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,923 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,923 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:01,923 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:01,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 771 states, 610 states have (on average 1.2327868852459016) internal successors, (752), 647 states have internal predecessors, (752), 88 states have call successors, (88), 66 states have call predecessors, (88), 72 states have return successors, (108), 84 states have call predecessors, (108), 88 states have call successors, (108) [2022-02-20 18:12:01,952 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 771 states to 771 states and 948 transitions. [2022-02-20 18:12:01,952 INFO L78 Accepts]: Start accepts. Automaton has 771 states and 948 transitions. Word has length 51 [2022-02-20 18:12:01,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:01,952 INFO L470 AbstractCegarLoop]: Abstraction has 771 states and 948 transitions. [2022-02-20 18:12:01,953 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.25) internal successors, (42), 7 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:01,953 INFO L276 IsEmpty]: Start isEmpty. Operand 771 states and 948 transitions. [2022-02-20 18:12:01,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2022-02-20 18:12:01,954 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:01,954 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:01,954 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:01,954 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:01,955 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:01,955 INFO L85 PathProgramCache]: Analyzing trace with hash 8311452, now seen corresponding path program 1 times [2022-02-20 18:12:01,955 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:01,955 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [608373372] [2022-02-20 18:12:01,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:01,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:01,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:02,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,016 INFO L290 TraceCheckUtils]: 0: Hoare triple {11676#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11640#true} is VALID [2022-02-20 18:12:02,016 INFO L290 TraceCheckUtils]: 1: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,017 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11640#true} {11640#true} #235#return; {11640#true} is VALID [2022-02-20 18:12:02,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:02,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:02,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,038 INFO L290 TraceCheckUtils]: 0: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L290 TraceCheckUtils]: 1: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11640#true} {11640#true} #227#return; {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L290 TraceCheckUtils]: 0: Hoare triple {11677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L272 TraceCheckUtils]: 1: Hoare triple {11640#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L290 TraceCheckUtils]: 2: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,039 INFO L290 TraceCheckUtils]: 3: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,040 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {11640#true} {11640#true} #227#return; {11640#true} is VALID [2022-02-20 18:12:02,040 INFO L290 TraceCheckUtils]: 5: Hoare triple {11640#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11640#true} is VALID [2022-02-20 18:12:02,040 INFO L290 TraceCheckUtils]: 6: Hoare triple {11640#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11640#true} is VALID [2022-02-20 18:12:02,040 INFO L290 TraceCheckUtils]: 7: Hoare triple {11640#true} assume !(0 != ~pumpRunning~0); {11640#true} is VALID [2022-02-20 18:12:02,040 INFO L290 TraceCheckUtils]: 8: Hoare triple {11640#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,041 INFO L290 TraceCheckUtils]: 9: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,041 INFO L290 TraceCheckUtils]: 10: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,041 INFO L290 TraceCheckUtils]: 11: Hoare triple {11681#(not (= 0 ~systemActive~0))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,042 INFO L290 TraceCheckUtils]: 12: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,042 INFO L290 TraceCheckUtils]: 13: Hoare triple {11681#(not (= 0 ~systemActive~0))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,042 INFO L290 TraceCheckUtils]: 14: Hoare triple {11681#(not (= 0 ~systemActive~0))} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,043 INFO L290 TraceCheckUtils]: 15: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,043 INFO L290 TraceCheckUtils]: 16: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline_activatePump } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,043 INFO L290 TraceCheckUtils]: 17: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,044 INFO L290 TraceCheckUtils]: 18: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,044 INFO L290 TraceCheckUtils]: 19: Hoare triple {11681#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,044 INFO L290 TraceCheckUtils]: 20: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,045 INFO L290 TraceCheckUtils]: 21: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,045 INFO L290 TraceCheckUtils]: 22: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,046 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {11681#(not (= 0 ~systemActive~0))} {11645#(= 0 ~systemActive~0)} #239#return; {11641#false} is VALID [2022-02-20 18:12:02,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:02,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,049 INFO L290 TraceCheckUtils]: 0: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,049 INFO L290 TraceCheckUtils]: 1: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,050 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11640#true} {11641#false} #227#return; {11641#false} is VALID [2022-02-20 18:12:02,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-02-20 18:12:02,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,053 INFO L290 TraceCheckUtils]: 0: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,053 INFO L290 TraceCheckUtils]: 1: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,053 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {11640#true} {11641#false} #233#return; {11641#false} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 0: Hoare triple {11640#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {11640#true} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 1: Hoare triple {11640#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {11640#true} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 2: Hoare triple {11640#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {11640#true} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 3: Hoare triple {11640#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {11640#true} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 4: Hoare triple {11640#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {11640#true} is VALID [2022-02-20 18:12:02,054 INFO L290 TraceCheckUtils]: 5: Hoare triple {11640#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 6: Hoare triple {11640#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 7: Hoare triple {11640#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 8: Hoare triple {11640#true} assume !false; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 9: Hoare triple {11640#true} assume test_~splverifierCounter~0#1 < 4; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 10: Hoare triple {11640#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {11640#true} is VALID [2022-02-20 18:12:02,055 INFO L290 TraceCheckUtils]: 11: Hoare triple {11640#true} assume 0 != test_~tmp~5#1; {11640#true} is VALID [2022-02-20 18:12:02,056 INFO L272 TraceCheckUtils]: 12: Hoare triple {11640#true} call waterRise(); {11676#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:02,056 INFO L290 TraceCheckUtils]: 13: Hoare triple {11676#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11640#true} is VALID [2022-02-20 18:12:02,056 INFO L290 TraceCheckUtils]: 14: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,056 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {11640#true} {11640#true} #235#return; {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 16: Hoare triple {11640#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 17: Hoare triple {11640#true} assume !(0 != test_~tmp___0~1#1); {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 18: Hoare triple {11640#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 19: Hoare triple {11640#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 20: Hoare triple {11640#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {11640#true} is VALID [2022-02-20 18:12:02,057 INFO L290 TraceCheckUtils]: 21: Hoare triple {11640#true} assume !(0 != ~pumpRunning~0); {11640#true} is VALID [2022-02-20 18:12:02,058 INFO L290 TraceCheckUtils]: 22: Hoare triple {11640#true} ~systemActive~0 := 0; {11645#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:02,058 INFO L290 TraceCheckUtils]: 23: Hoare triple {11645#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {11645#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:02,059 INFO L272 TraceCheckUtils]: 24: Hoare triple {11645#(= 0 ~systemActive~0)} call timeShift(); {11677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:02,059 INFO L290 TraceCheckUtils]: 25: Hoare triple {11677#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11640#true} is VALID [2022-02-20 18:12:02,059 INFO L272 TraceCheckUtils]: 26: Hoare triple {11640#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {11640#true} is VALID [2022-02-20 18:12:02,059 INFO L290 TraceCheckUtils]: 27: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,059 INFO L290 TraceCheckUtils]: 28: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,059 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {11640#true} {11640#true} #227#return; {11640#true} is VALID [2022-02-20 18:12:02,060 INFO L290 TraceCheckUtils]: 30: Hoare triple {11640#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11640#true} is VALID [2022-02-20 18:12:02,060 INFO L290 TraceCheckUtils]: 31: Hoare triple {11640#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11640#true} is VALID [2022-02-20 18:12:02,060 INFO L290 TraceCheckUtils]: 32: Hoare triple {11640#true} assume !(0 != ~pumpRunning~0); {11640#true} is VALID [2022-02-20 18:12:02,061 INFO L290 TraceCheckUtils]: 33: Hoare triple {11640#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,061 INFO L290 TraceCheckUtils]: 34: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,061 INFO L290 TraceCheckUtils]: 35: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,062 INFO L290 TraceCheckUtils]: 36: Hoare triple {11681#(not (= 0 ~systemActive~0))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,062 INFO L290 TraceCheckUtils]: 37: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,063 INFO L290 TraceCheckUtils]: 38: Hoare triple {11681#(not (= 0 ~systemActive~0))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,063 INFO L290 TraceCheckUtils]: 39: Hoare triple {11681#(not (= 0 ~systemActive~0))} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,063 INFO L290 TraceCheckUtils]: 40: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,064 INFO L290 TraceCheckUtils]: 41: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline_activatePump } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,064 INFO L290 TraceCheckUtils]: 42: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,065 INFO L290 TraceCheckUtils]: 43: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,065 INFO L290 TraceCheckUtils]: 44: Hoare triple {11681#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,065 INFO L290 TraceCheckUtils]: 45: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,066 INFO L290 TraceCheckUtils]: 46: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,066 INFO L290 TraceCheckUtils]: 47: Hoare triple {11681#(not (= 0 ~systemActive~0))} assume true; {11681#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:02,066 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {11681#(not (= 0 ~systemActive~0))} {11645#(= 0 ~systemActive~0)} #239#return; {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 49: Hoare triple {11641#false} assume !false; {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 50: Hoare triple {11641#false} assume test_~splverifierCounter~0#1 < 4; {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 51: Hoare triple {11641#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 52: Hoare triple {11641#false} assume !(0 != test_~tmp~5#1); {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 53: Hoare triple {11641#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {11641#false} is VALID [2022-02-20 18:12:02,067 INFO L290 TraceCheckUtils]: 54: Hoare triple {11641#false} assume !(0 != test_~tmp___0~1#1); {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L290 TraceCheckUtils]: 55: Hoare triple {11641#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L290 TraceCheckUtils]: 56: Hoare triple {11641#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L290 TraceCheckUtils]: 57: Hoare triple {11641#false} assume !(0 != test_~tmp___1~0#1); {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L272 TraceCheckUtils]: 58: Hoare triple {11641#false} call timeShift(); {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L290 TraceCheckUtils]: 59: Hoare triple {11641#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11641#false} is VALID [2022-02-20 18:12:02,068 INFO L272 TraceCheckUtils]: 60: Hoare triple {11641#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {11640#true} is VALID [2022-02-20 18:12:02,068 INFO L290 TraceCheckUtils]: 61: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 62: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,069 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {11640#true} {11641#false} #227#return; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 64: Hoare triple {11641#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 65: Hoare triple {11641#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 66: Hoare triple {11641#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 67: Hoare triple {11641#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 68: Hoare triple {11641#false} assume { :end_inline_lowerWaterLevel } true; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 69: Hoare triple {11641#false} assume !(0 != ~systemActive~0); {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 70: Hoare triple {11641#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 71: Hoare triple {11641#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {11641#false} is VALID [2022-02-20 18:12:02,069 INFO L290 TraceCheckUtils]: 72: Hoare triple {11641#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L272 TraceCheckUtils]: 73: Hoare triple {11641#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {11640#true} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 74: Hoare triple {11640#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {11640#true} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 75: Hoare triple {11640#true} assume true; {11640#true} is VALID [2022-02-20 18:12:02,070 INFO L284 TraceCheckUtils]: 76: Hoare quadruple {11640#true} {11641#false} #233#return; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 77: Hoare triple {11641#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 78: Hoare triple {11641#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 79: Hoare triple {11641#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L290 TraceCheckUtils]: 80: Hoare triple {11641#false} assume !false; {11641#false} is VALID [2022-02-20 18:12:02,070 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-20 18:12:02,071 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:02,071 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [608373372] [2022-02-20 18:12:02,071 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [608373372] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:02,071 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:02,071 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:02,071 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776230408] [2022-02-20 18:12:02,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:02,072 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 81 [2022-02-20 18:12:02,072 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:02,072 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:12:02,153 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,153 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:02,153 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:02,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:02,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:02,154 INFO L87 Difference]: Start difference. First operand 771 states and 948 transitions. Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:12:02,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,652 INFO L93 Difference]: Finished difference Result 1319 states and 1618 transitions. [2022-02-20 18:12:02,652 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:12:02,652 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 81 [2022-02-20 18:12:02,652 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:02,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:12:02,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 247 transitions. [2022-02-20 18:12:02,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:12:02,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 247 transitions. [2022-02-20 18:12:02,656 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 247 transitions. [2022-02-20 18:12:02,830 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,846 INFO L225 Difference]: With dead ends: 1319 [2022-02-20 18:12:02,846 INFO L226 Difference]: Without dead ends: 556 [2022-02-20 18:12:02,847 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=30, Invalid=60, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:02,848 INFO L933 BasicCegarLoop]: 126 mSDtfsCounter, 176 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:02,848 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [183 Valid, 307 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:02,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2022-02-20 18:12:02,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 540. [2022-02-20 18:12:02,907 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:02,908 INFO L82 GeneralOperation]: Start isEquivalent. First operand 556 states. Second operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2022-02-20 18:12:02,909 INFO L74 IsIncluded]: Start isIncluded. First operand 556 states. Second operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2022-02-20 18:12:02,909 INFO L87 Difference]: Start difference. First operand 556 states. Second operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2022-02-20 18:12:02,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,922 INFO L93 Difference]: Finished difference Result 556 states and 668 transitions. [2022-02-20 18:12:02,922 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 668 transitions. [2022-02-20 18:12:02,923 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,923 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,924 INFO L74 IsIncluded]: Start isIncluded. First operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) Second operand 556 states. [2022-02-20 18:12:02,925 INFO L87 Difference]: Start difference. First operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) Second operand 556 states. [2022-02-20 18:12:02,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,938 INFO L93 Difference]: Finished difference Result 556 states and 668 transitions. [2022-02-20 18:12:02,938 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 668 transitions. [2022-02-20 18:12:02,939 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,939 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,939 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:02,939 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:02,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 540 states, 426 states have (on average 1.2183098591549295) internal successors, (519), 452 states have internal predecessors, (519), 62 states have call successors, (62), 48 states have call predecessors, (62), 51 states have return successors, (72), 59 states have call predecessors, (72), 62 states have call successors, (72) [2022-02-20 18:12:02,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 540 states to 540 states and 653 transitions. [2022-02-20 18:12:02,955 INFO L78 Accepts]: Start accepts. Automaton has 540 states and 653 transitions. Word has length 81 [2022-02-20 18:12:02,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:02,955 INFO L470 AbstractCegarLoop]: Abstraction has 540 states and 653 transitions. [2022-02-20 18:12:02,956 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.0) internal successors, (66), 4 states have internal predecessors, (66), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-02-20 18:12:02,956 INFO L276 IsEmpty]: Start isEmpty. Operand 540 states and 653 transitions. [2022-02-20 18:12:02,956 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-02-20 18:12:02,957 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:02,957 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:02,957 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:12:02,957 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:02,957 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:02,957 INFO L85 PathProgramCache]: Analyzing trace with hash -1954817075, now seen corresponding path program 1 times [2022-02-20 18:12:02,958 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:02,958 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847471267] [2022-02-20 18:12:02,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:02,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:02,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:03,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,019 INFO L290 TraceCheckUtils]: 0: Hoare triple {15434#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15393#true} is VALID [2022-02-20 18:12:03,019 INFO L290 TraceCheckUtils]: 1: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,019 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15393#true} {15395#(= 1 ~systemActive~0)} #235#return; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:12:03,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:03,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,046 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,046 INFO L290 TraceCheckUtils]: 1: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15393#true} {15393#true} #227#return; {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L290 TraceCheckUtils]: 0: Hoare triple {15435#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L272 TraceCheckUtils]: 1: Hoare triple {15393#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L290 TraceCheckUtils]: 2: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L290 TraceCheckUtils]: 3: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,047 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15393#true} {15393#true} #227#return; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 5: Hoare triple {15393#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 6: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 7: Hoare triple {15393#true} assume !(0 != ~pumpRunning~0); {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 8: Hoare triple {15393#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 9: Hoare triple {15393#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 10: Hoare triple {15393#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,048 INFO L290 TraceCheckUtils]: 11: Hoare triple {15393#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15393#true} is VALID [2022-02-20 18:12:03,049 INFO L290 TraceCheckUtils]: 12: Hoare triple {15393#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15393#true} is VALID [2022-02-20 18:12:03,049 INFO L290 TraceCheckUtils]: 13: Hoare triple {15393#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {15393#true} is VALID [2022-02-20 18:12:03,049 INFO L290 TraceCheckUtils]: 14: Hoare triple {15393#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15393#true} is VALID [2022-02-20 18:12:03,049 INFO L290 TraceCheckUtils]: 15: Hoare triple {15393#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,050 INFO L290 TraceCheckUtils]: 16: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,050 INFO L290 TraceCheckUtils]: 17: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,050 INFO L290 TraceCheckUtils]: 18: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,051 INFO L290 TraceCheckUtils]: 19: Hoare triple {15439#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,051 INFO L290 TraceCheckUtils]: 20: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,051 INFO L290 TraceCheckUtils]: 21: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,052 INFO L290 TraceCheckUtils]: 22: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,052 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {15439#(<= 1 ~pumpRunning~0)} {15395#(= 1 ~systemActive~0)} #239#return; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-02-20 18:12:03,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,062 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:03,062 INFO L290 TraceCheckUtils]: 1: Hoare triple {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:03,063 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} {15423#(not (= ~pumpRunning~0 0))} #227#return; {15427#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1| 0))} is VALID [2022-02-20 18:12:03,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-02-20 18:12:03,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,066 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,067 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {15393#true} {15428#(not (= ~switchedOnBeforeTS~0 0))} #231#return; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-02-20 18:12:03,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,070 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,070 INFO L290 TraceCheckUtils]: 1: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,071 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15393#true} {15428#(not (= ~switchedOnBeforeTS~0 0))} #233#return; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,072 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,073 INFO L290 TraceCheckUtils]: 1: Hoare triple {15395#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,073 INFO L290 TraceCheckUtils]: 2: Hoare triple {15395#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,074 INFO L290 TraceCheckUtils]: 3: Hoare triple {15395#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,074 INFO L290 TraceCheckUtils]: 4: Hoare triple {15395#(= 1 ~systemActive~0)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,074 INFO L290 TraceCheckUtils]: 5: Hoare triple {15395#(= 1 ~systemActive~0)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,075 INFO L290 TraceCheckUtils]: 6: Hoare triple {15395#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,075 INFO L290 TraceCheckUtils]: 7: Hoare triple {15395#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,075 INFO L290 TraceCheckUtils]: 8: Hoare triple {15395#(= 1 ~systemActive~0)} assume !false; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,076 INFO L290 TraceCheckUtils]: 9: Hoare triple {15395#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,076 INFO L290 TraceCheckUtils]: 10: Hoare triple {15395#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,076 INFO L290 TraceCheckUtils]: 11: Hoare triple {15395#(= 1 ~systemActive~0)} assume 0 != test_~tmp~5#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,077 INFO L272 TraceCheckUtils]: 12: Hoare triple {15395#(= 1 ~systemActive~0)} call waterRise(); {15434#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:03,077 INFO L290 TraceCheckUtils]: 13: Hoare triple {15434#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15393#true} is VALID [2022-02-20 18:12:03,077 INFO L290 TraceCheckUtils]: 14: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,078 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15393#true} {15395#(= 1 ~systemActive~0)} #235#return; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,078 INFO L290 TraceCheckUtils]: 16: Hoare triple {15395#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,078 INFO L290 TraceCheckUtils]: 17: Hoare triple {15395#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,079 INFO L290 TraceCheckUtils]: 18: Hoare triple {15395#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,079 INFO L290 TraceCheckUtils]: 19: Hoare triple {15395#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,079 INFO L290 TraceCheckUtils]: 20: Hoare triple {15395#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___1~0#1); {15395#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:03,080 INFO L272 TraceCheckUtils]: 21: Hoare triple {15395#(= 1 ~systemActive~0)} call timeShift(); {15435#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:03,080 INFO L290 TraceCheckUtils]: 22: Hoare triple {15435#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,080 INFO L272 TraceCheckUtils]: 23: Hoare triple {15393#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:03,080 INFO L290 TraceCheckUtils]: 24: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 25: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15393#true} {15393#true} #227#return; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 27: Hoare triple {15393#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 28: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 29: Hoare triple {15393#true} assume !(0 != ~pumpRunning~0); {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 30: Hoare triple {15393#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15393#true} is VALID [2022-02-20 18:12:03,081 INFO L290 TraceCheckUtils]: 31: Hoare triple {15393#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,082 INFO L290 TraceCheckUtils]: 32: Hoare triple {15393#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,082 INFO L290 TraceCheckUtils]: 33: Hoare triple {15393#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15393#true} is VALID [2022-02-20 18:12:03,082 INFO L290 TraceCheckUtils]: 34: Hoare triple {15393#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15393#true} is VALID [2022-02-20 18:12:03,082 INFO L290 TraceCheckUtils]: 35: Hoare triple {15393#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {15393#true} is VALID [2022-02-20 18:12:03,082 INFO L290 TraceCheckUtils]: 36: Hoare triple {15393#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15393#true} is VALID [2022-02-20 18:12:03,083 INFO L290 TraceCheckUtils]: 37: Hoare triple {15393#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,083 INFO L290 TraceCheckUtils]: 38: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,083 INFO L290 TraceCheckUtils]: 39: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,084 INFO L290 TraceCheckUtils]: 40: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,084 INFO L290 TraceCheckUtils]: 41: Hoare triple {15439#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,084 INFO L290 TraceCheckUtils]: 42: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,084 INFO L290 TraceCheckUtils]: 43: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,085 INFO L290 TraceCheckUtils]: 44: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,085 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {15439#(<= 1 ~pumpRunning~0)} {15395#(= 1 ~systemActive~0)} #239#return; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,086 INFO L290 TraceCheckUtils]: 46: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume !false; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,086 INFO L290 TraceCheckUtils]: 47: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,086 INFO L290 TraceCheckUtils]: 48: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,086 INFO L290 TraceCheckUtils]: 49: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~5#1); {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,087 INFO L290 TraceCheckUtils]: 50: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,087 INFO L290 TraceCheckUtils]: 51: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~1#1); {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,087 INFO L290 TraceCheckUtils]: 52: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,088 INFO L290 TraceCheckUtils]: 53: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,088 INFO L290 TraceCheckUtils]: 54: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___1~0#1); {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,088 INFO L272 TraceCheckUtils]: 55: Hoare triple {15423#(not (= ~pumpRunning~0 0))} call timeShift(); {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,089 INFO L290 TraceCheckUtils]: 56: Hoare triple {15423#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15423#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:03,089 INFO L272 TraceCheckUtils]: 57: Hoare triple {15423#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:03,089 INFO L290 TraceCheckUtils]: 58: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:03,089 INFO L290 TraceCheckUtils]: 59: Hoare triple {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:03,090 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {15440#(= ~pumpRunning~0 |isPumpRunning_#res|)} {15423#(not (= ~pumpRunning~0 0))} #227#return; {15427#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1| 0))} is VALID [2022-02-20 18:12:03,090 INFO L290 TraceCheckUtils]: 61: Hoare triple {15427#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,091 INFO L290 TraceCheckUtils]: 62: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,091 INFO L290 TraceCheckUtils]: 63: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,092 INFO L290 TraceCheckUtils]: 64: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,092 INFO L290 TraceCheckUtils]: 65: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,092 INFO L290 TraceCheckUtils]: 66: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,093 INFO L290 TraceCheckUtils]: 67: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 == ~pumpRunning~0); {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,093 INFO L272 TraceCheckUtils]: 68: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__wrappee__base(); {15393#true} is VALID [2022-02-20 18:12:03,093 INFO L290 TraceCheckUtils]: 69: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,093 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {15393#true} {15428#(not (= ~switchedOnBeforeTS~0 0))} #231#return; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,094 INFO L290 TraceCheckUtils]: 71: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,094 INFO L290 TraceCheckUtils]: 72: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,094 INFO L290 TraceCheckUtils]: 73: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,095 INFO L290 TraceCheckUtils]: 74: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,095 INFO L272 TraceCheckUtils]: 75: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:03,095 INFO L290 TraceCheckUtils]: 76: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,095 INFO L290 TraceCheckUtils]: 77: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,096 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {15393#true} {15428#(not (= ~switchedOnBeforeTS~0 0))} #233#return; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,096 INFO L290 TraceCheckUtils]: 79: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,096 INFO L290 TraceCheckUtils]: 80: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {15428#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:03,097 INFO L290 TraceCheckUtils]: 81: Hoare triple {15428#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15394#false} is VALID [2022-02-20 18:12:03,097 INFO L290 TraceCheckUtils]: 82: Hoare triple {15394#false} assume !false; {15394#false} is VALID [2022-02-20 18:12:03,097 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-02-20 18:12:03,097 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:03,097 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847471267] [2022-02-20 18:12:03,098 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1847471267] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:03,098 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1920645328] [2022-02-20 18:12:03,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:03,098 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:03,098 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:03,103 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:03,131 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:03,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,214 INFO L263 TraceCheckSpWp]: Trace formula consists of 445 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:03,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,242 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:03,640 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15393#true} is VALID [2022-02-20 18:12:03,641 INFO L290 TraceCheckUtils]: 1: Hoare triple {15393#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {15393#true} is VALID [2022-02-20 18:12:03,641 INFO L290 TraceCheckUtils]: 2: Hoare triple {15393#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15393#true} is VALID [2022-02-20 18:12:03,641 INFO L290 TraceCheckUtils]: 3: Hoare triple {15393#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {15393#true} is VALID [2022-02-20 18:12:03,641 INFO L290 TraceCheckUtils]: 4: Hoare triple {15393#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {15393#true} is VALID [2022-02-20 18:12:03,641 INFO L290 TraceCheckUtils]: 5: Hoare triple {15393#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 6: Hoare triple {15393#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 7: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 8: Hoare triple {15393#true} assume !false; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 9: Hoare triple {15393#true} assume test_~splverifierCounter~0#1 < 4; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 10: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L290 TraceCheckUtils]: 11: Hoare triple {15393#true} assume 0 != test_~tmp~5#1; {15393#true} is VALID [2022-02-20 18:12:03,642 INFO L272 TraceCheckUtils]: 12: Hoare triple {15393#true} call waterRise(); {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 13: Hoare triple {15393#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 14: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15393#true} {15393#true} #235#return; {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 16: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 17: Hoare triple {15393#true} assume !(0 != test_~tmp___0~1#1); {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 18: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15393#true} is VALID [2022-02-20 18:12:03,643 INFO L290 TraceCheckUtils]: 19: Hoare triple {15393#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L290 TraceCheckUtils]: 20: Hoare triple {15393#true} assume !(0 != test_~tmp___1~0#1); {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L272 TraceCheckUtils]: 21: Hoare triple {15393#true} call timeShift(); {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L290 TraceCheckUtils]: 22: Hoare triple {15393#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L272 TraceCheckUtils]: 23: Hoare triple {15393#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L290 TraceCheckUtils]: 24: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L290 TraceCheckUtils]: 25: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15393#true} {15393#true} #227#return; {15393#true} is VALID [2022-02-20 18:12:03,644 INFO L290 TraceCheckUtils]: 27: Hoare triple {15393#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 28: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 29: Hoare triple {15393#true} assume !(0 != ~pumpRunning~0); {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 30: Hoare triple {15393#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 31: Hoare triple {15393#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 32: Hoare triple {15393#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 33: Hoare triple {15393#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15393#true} is VALID [2022-02-20 18:12:03,645 INFO L290 TraceCheckUtils]: 34: Hoare triple {15393#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15393#true} is VALID [2022-02-20 18:12:03,646 INFO L290 TraceCheckUtils]: 35: Hoare triple {15393#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {15393#true} is VALID [2022-02-20 18:12:03,646 INFO L290 TraceCheckUtils]: 36: Hoare triple {15393#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15393#true} is VALID [2022-02-20 18:12:03,646 INFO L290 TraceCheckUtils]: 37: Hoare triple {15393#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,646 INFO L290 TraceCheckUtils]: 38: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,647 INFO L290 TraceCheckUtils]: 39: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,647 INFO L290 TraceCheckUtils]: 40: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,647 INFO L290 TraceCheckUtils]: 41: Hoare triple {15439#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,650 INFO L290 TraceCheckUtils]: 42: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,650 INFO L290 TraceCheckUtils]: 43: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,650 INFO L290 TraceCheckUtils]: 44: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,651 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {15439#(<= 1 ~pumpRunning~0)} {15393#true} #239#return; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,651 INFO L290 TraceCheckUtils]: 46: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !false; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,651 INFO L290 TraceCheckUtils]: 47: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,652 INFO L290 TraceCheckUtils]: 48: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,652 INFO L290 TraceCheckUtils]: 49: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,652 INFO L290 TraceCheckUtils]: 50: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,652 INFO L290 TraceCheckUtils]: 51: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,653 INFO L290 TraceCheckUtils]: 52: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,653 INFO L290 TraceCheckUtils]: 53: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,653 INFO L290 TraceCheckUtils]: 54: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___1~0#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,654 INFO L272 TraceCheckUtils]: 55: Hoare triple {15439#(<= 1 ~pumpRunning~0)} call timeShift(); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,654 INFO L290 TraceCheckUtils]: 56: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,654 INFO L272 TraceCheckUtils]: 57: Hoare triple {15439#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:03,655 INFO L290 TraceCheckUtils]: 58: Hoare triple {15439#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15618#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:03,655 INFO L290 TraceCheckUtils]: 59: Hoare triple {15618#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {15618#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:03,656 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {15618#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {15439#(<= 1 ~pumpRunning~0)} #227#return; {15625#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1|)} is VALID [2022-02-20 18:12:03,656 INFO L290 TraceCheckUtils]: 61: Hoare triple {15625#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,657 INFO L290 TraceCheckUtils]: 62: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,657 INFO L290 TraceCheckUtils]: 63: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,657 INFO L290 TraceCheckUtils]: 64: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,657 INFO L290 TraceCheckUtils]: 65: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,658 INFO L290 TraceCheckUtils]: 66: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,658 INFO L290 TraceCheckUtils]: 67: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,658 INFO L272 TraceCheckUtils]: 68: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,659 INFO L290 TraceCheckUtils]: 69: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,659 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {15629#(<= 1 ~switchedOnBeforeTS~0)} {15629#(<= 1 ~switchedOnBeforeTS~0)} #231#return; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,659 INFO L290 TraceCheckUtils]: 71: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,660 INFO L290 TraceCheckUtils]: 72: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,660 INFO L290 TraceCheckUtils]: 73: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,660 INFO L290 TraceCheckUtils]: 74: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,661 INFO L272 TraceCheckUtils]: 75: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,661 INFO L290 TraceCheckUtils]: 76: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,661 INFO L290 TraceCheckUtils]: 77: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,662 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {15629#(<= 1 ~switchedOnBeforeTS~0)} {15629#(<= 1 ~switchedOnBeforeTS~0)} #233#return; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,662 INFO L290 TraceCheckUtils]: 79: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,662 INFO L290 TraceCheckUtils]: 80: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:03,663 INFO L290 TraceCheckUtils]: 81: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15394#false} is VALID [2022-02-20 18:12:03,663 INFO L290 TraceCheckUtils]: 82: Hoare triple {15394#false} assume !false; {15394#false} is VALID [2022-02-20 18:12:03,663 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 23 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:03,663 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:04,116 INFO L290 TraceCheckUtils]: 82: Hoare triple {15394#false} assume !false; {15394#false} is VALID [2022-02-20 18:12:04,117 INFO L290 TraceCheckUtils]: 81: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15394#false} is VALID [2022-02-20 18:12:04,117 INFO L290 TraceCheckUtils]: 80: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,118 INFO L290 TraceCheckUtils]: 79: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,118 INFO L284 TraceCheckUtils]: 78: Hoare quadruple {15393#true} {15629#(<= 1 ~switchedOnBeforeTS~0)} #233#return; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,118 INFO L290 TraceCheckUtils]: 77: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:04,118 INFO L290 TraceCheckUtils]: 76: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:04,118 INFO L272 TraceCheckUtils]: 75: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:04,118 INFO L290 TraceCheckUtils]: 74: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,119 INFO L290 TraceCheckUtils]: 73: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,119 INFO L290 TraceCheckUtils]: 72: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,119 INFO L290 TraceCheckUtils]: 71: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,120 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {15393#true} {15629#(<= 1 ~switchedOnBeforeTS~0)} #231#return; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,120 INFO L290 TraceCheckUtils]: 69: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:04,120 INFO L272 TraceCheckUtils]: 68: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {15393#true} is VALID [2022-02-20 18:12:04,120 INFO L290 TraceCheckUtils]: 67: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,120 INFO L290 TraceCheckUtils]: 66: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,120 INFO L290 TraceCheckUtils]: 65: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,121 INFO L290 TraceCheckUtils]: 64: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,121 INFO L290 TraceCheckUtils]: 63: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,121 INFO L290 TraceCheckUtils]: 62: Hoare triple {15629#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,122 INFO L290 TraceCheckUtils]: 61: Hoare triple {15625#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15629#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:04,122 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {15762#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {15439#(<= 1 ~pumpRunning~0)} #227#return; {15625#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret44#1|)} is VALID [2022-02-20 18:12:04,122 INFO L290 TraceCheckUtils]: 59: Hoare triple {15762#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {15762#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:04,123 INFO L290 TraceCheckUtils]: 58: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15762#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:04,123 INFO L272 TraceCheckUtils]: 57: Hoare triple {15439#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:04,123 INFO L290 TraceCheckUtils]: 56: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,123 INFO L272 TraceCheckUtils]: 55: Hoare triple {15439#(<= 1 ~pumpRunning~0)} call timeShift(); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,124 INFO L290 TraceCheckUtils]: 54: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___1~0#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,124 INFO L290 TraceCheckUtils]: 53: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,124 INFO L290 TraceCheckUtils]: 52: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,125 INFO L290 TraceCheckUtils]: 51: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,125 INFO L290 TraceCheckUtils]: 50: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,125 INFO L290 TraceCheckUtils]: 49: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,125 INFO L290 TraceCheckUtils]: 48: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,126 INFO L290 TraceCheckUtils]: 47: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,126 INFO L290 TraceCheckUtils]: 46: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !false; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,126 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {15439#(<= 1 ~pumpRunning~0)} {15393#true} #239#return; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,126 INFO L290 TraceCheckUtils]: 44: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,127 INFO L290 TraceCheckUtils]: 43: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,127 INFO L290 TraceCheckUtils]: 42: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,127 INFO L290 TraceCheckUtils]: 41: Hoare triple {15439#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,127 INFO L290 TraceCheckUtils]: 40: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 39: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 38: Hoare triple {15439#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 37: Hoare triple {15393#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15439#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 36: Hoare triple {15393#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {15393#true} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 35: Hoare triple {15393#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {15393#true} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 34: Hoare triple {15393#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {15393#true} is VALID [2022-02-20 18:12:04,128 INFO L290 TraceCheckUtils]: 33: Hoare triple {15393#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 32: Hoare triple {15393#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 31: Hoare triple {15393#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 30: Hoare triple {15393#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 29: Hoare triple {15393#true} assume !(0 != ~pumpRunning~0); {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 28: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 27: Hoare triple {15393#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {15393#true} {15393#true} #227#return; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 25: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 24: Hoare triple {15393#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L272 TraceCheckUtils]: 23: Hoare triple {15393#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 22: Hoare triple {15393#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L272 TraceCheckUtils]: 21: Hoare triple {15393#true} call timeShift(); {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 20: Hoare triple {15393#true} assume !(0 != test_~tmp___1~0#1); {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 19: Hoare triple {15393#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 18: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 17: Hoare triple {15393#true} assume !(0 != test_~tmp___0~1#1); {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 16: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15393#true} {15393#true} #235#return; {15393#true} is VALID [2022-02-20 18:12:04,129 INFO L290 TraceCheckUtils]: 14: Hoare triple {15393#true} assume true; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 13: Hoare triple {15393#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L272 TraceCheckUtils]: 12: Hoare triple {15393#true} call waterRise(); {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 11: Hoare triple {15393#true} assume 0 != test_~tmp~5#1; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 10: Hoare triple {15393#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 9: Hoare triple {15393#true} assume test_~splverifierCounter~0#1 < 4; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 8: Hoare triple {15393#true} assume !false; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 7: Hoare triple {15393#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 6: Hoare triple {15393#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 5: Hoare triple {15393#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 4: Hoare triple {15393#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 3: Hoare triple {15393#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 2: Hoare triple {15393#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 1: Hoare triple {15393#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L290 TraceCheckUtils]: 0: Hoare triple {15393#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15393#true} is VALID [2022-02-20 18:12:04,130 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-02-20 18:12:04,131 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1920645328] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:04,131 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:04,131 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 14 [2022-02-20 18:12:04,131 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [609510942] [2022-02-20 18:12:04,131 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:04,132 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) Word has length 83 [2022-02-20 18:12:04,132 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:04,132 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-02-20 18:12:04,233 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 148 edges. 148 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,233 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-02-20 18:12:04,233 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:04,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-02-20 18:12:04,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:12:04,234 INFO L87 Difference]: Start difference. First operand 540 states and 653 transitions. Second operand has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-02-20 18:12:06,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,374 INFO L93 Difference]: Finished difference Result 1121 states and 1388 transitions. [2022-02-20 18:12:06,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-02-20 18:12:06,374 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) Word has length 83 [2022-02-20 18:12:06,375 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:06,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-02-20 18:12:06,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 424 transitions. [2022-02-20 18:12:06,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-02-20 18:12:06,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 424 transitions. [2022-02-20 18:12:06,383 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 36 states and 424 transitions. [2022-02-20 18:12:06,662 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 424 edges. 424 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:06,695 INFO L225 Difference]: With dead ends: 1121 [2022-02-20 18:12:06,695 INFO L226 Difference]: Without dead ends: 668 [2022-02-20 18:12:06,697 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 224 GetRequests, 181 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 481 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=393, Invalid=1499, Unknown=0, NotChecked=0, Total=1892 [2022-02-20 18:12:06,697 INFO L933 BasicCegarLoop]: 183 mSDtfsCounter, 340 mSDsluCounter, 851 mSDsCounter, 0 mSdLazyCounter, 574 mSolverCounterSat, 167 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 1034 SdHoareTripleChecker+Invalid, 741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 167 IncrementalHoareTripleChecker+Valid, 574 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:06,698 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [344 Valid, 1034 Invalid, 741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [167 Valid, 574 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-02-20 18:12:06,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 668 states. [2022-02-20 18:12:06,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 668 to 580. [2022-02-20 18:12:06,850 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:06,851 INFO L82 GeneralOperation]: Start isEquivalent. First operand 668 states. Second operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2022-02-20 18:12:06,852 INFO L74 IsIncluded]: Start isIncluded. First operand 668 states. Second operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2022-02-20 18:12:06,852 INFO L87 Difference]: Start difference. First operand 668 states. Second operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2022-02-20 18:12:06,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,868 INFO L93 Difference]: Finished difference Result 668 states and 800 transitions. [2022-02-20 18:12:06,868 INFO L276 IsEmpty]: Start isEmpty. Operand 668 states and 800 transitions. [2022-02-20 18:12:06,869 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:06,869 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:06,870 INFO L74 IsIncluded]: Start isIncluded. First operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) Second operand 668 states. [2022-02-20 18:12:06,871 INFO L87 Difference]: Start difference. First operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) Second operand 668 states. [2022-02-20 18:12:06,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,886 INFO L93 Difference]: Finished difference Result 668 states and 800 transitions. [2022-02-20 18:12:06,886 INFO L276 IsEmpty]: Start isEmpty. Operand 668 states and 800 transitions. [2022-02-20 18:12:06,888 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:06,888 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:06,888 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:06,888 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:06,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 580 states, 449 states have (on average 1.2026726057906458) internal successors, (540), 479 states have internal predecessors, (540), 71 states have call successors, (71), 60 states have call predecessors, (71), 59 states have return successors, (77), 62 states have call predecessors, (77), 71 states have call successors, (77) [2022-02-20 18:12:06,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 580 states to 580 states and 688 transitions. [2022-02-20 18:12:06,905 INFO L78 Accepts]: Start accepts. Automaton has 580 states and 688 transitions. Word has length 83 [2022-02-20 18:12:06,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:06,905 INFO L470 AbstractCegarLoop]: Abstraction has 580 states and 688 transitions. [2022-02-20 18:12:06,905 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-02-20 18:12:06,905 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 688 transitions. [2022-02-20 18:12:06,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 179 [2022-02-20 18:12:06,911 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:06,911 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:06,935 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:07,127 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:12:07,128 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:07,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:07,128 INFO L85 PathProgramCache]: Analyzing trace with hash 57448184, now seen corresponding path program 1 times [2022-02-20 18:12:07,128 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:07,128 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309043155] [2022-02-20 18:12:07,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:07,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:07,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:07,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {19815#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19718#true} is VALID [2022-02-20 18:12:07,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,224 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19718#true} #235#return; {19718#true} is VALID [2022-02-20 18:12:07,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-20 18:12:07,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:07,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,239 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,239 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,239 INFO L290 TraceCheckUtils]: 0: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,240 INFO L272 TraceCheckUtils]: 1: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,240 INFO L290 TraceCheckUtils]: 2: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,240 INFO L290 TraceCheckUtils]: 3: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,240 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,240 INFO L290 TraceCheckUtils]: 5: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,246 INFO L290 TraceCheckUtils]: 6: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 7: Hoare triple {19718#true} assume !(0 != ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 8: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 9: Hoare triple {19718#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 10: Hoare triple {19718#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 11: Hoare triple {19718#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 12: Hoare triple {19718#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 13: Hoare triple {19718#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19718#true} is VALID [2022-02-20 18:12:07,247 INFO L290 TraceCheckUtils]: 14: Hoare triple {19718#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 15: Hoare triple {19718#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 16: Hoare triple {19718#true} assume { :end_inline_activatePump } true; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 17: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 18: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 19: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 20: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 21: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L290 TraceCheckUtils]: 22: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,248 INFO L284 TraceCheckUtils]: 23: Hoare quadruple {19718#true} {19718#true} #239#return; {19718#true} is VALID [2022-02-20 18:12:07,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-02-20 18:12:07,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:07,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,257 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,258 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,258 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:07,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,261 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L290 TraceCheckUtils]: 0: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L272 TraceCheckUtils]: 1: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L290 TraceCheckUtils]: 2: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L290 TraceCheckUtils]: 3: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,262 INFO L290 TraceCheckUtils]: 5: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 6: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 7: Hoare triple {19718#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 8: Hoare triple {19718#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 9: Hoare triple {19718#true} assume { :end_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 10: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 11: Hoare triple {19718#true} assume !(0 == ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L272 TraceCheckUtils]: 12: Hoare triple {19718#true} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L290 TraceCheckUtils]: 13: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,263 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 15: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 16: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 17: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 18: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 19: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L290 TraceCheckUtils]: 20: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,264 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19718#true} {19718#true} #239#return; {19718#true} is VALID [2022-02-20 18:12:07,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-02-20 18:12:07,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:07,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,313 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,313 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,313 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:07,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,314 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L290 TraceCheckUtils]: 0: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L272 TraceCheckUtils]: 1: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L290 TraceCheckUtils]: 2: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L290 TraceCheckUtils]: 3: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L290 TraceCheckUtils]: 5: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,315 INFO L290 TraceCheckUtils]: 6: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 7: Hoare triple {19718#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 8: Hoare triple {19718#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 9: Hoare triple {19718#true} assume { :end_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 10: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 11: Hoare triple {19718#true} assume !(0 == ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L272 TraceCheckUtils]: 12: Hoare triple {19718#true} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 13: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,316 INFO L290 TraceCheckUtils]: 15: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,317 INFO L290 TraceCheckUtils]: 16: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19830#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:07,317 INFO L290 TraceCheckUtils]: 17: Hoare triple {19830#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19831#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:07,318 INFO L290 TraceCheckUtils]: 18: Hoare triple {19831#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,318 INFO L290 TraceCheckUtils]: 19: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,318 INFO L290 TraceCheckUtils]: 20: Hoare triple {19791#(= 2 ~waterLevel~0)} assume true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,318 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {19791#(= 2 ~waterLevel~0)} {19718#true} #239#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-02-20 18:12:07,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:07,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,341 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,341 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L272 TraceCheckUtils]: 1: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 2: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 3: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 5: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 6: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 7: Hoare triple {19718#true} assume !(0 != ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,342 INFO L290 TraceCheckUtils]: 8: Hoare triple {19718#true} assume !(0 != ~systemActive~0); {19718#true} is VALID [2022-02-20 18:12:07,343 INFO L290 TraceCheckUtils]: 9: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19835#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:07,343 INFO L290 TraceCheckUtils]: 10: Hoare triple {19835#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19836#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)} is VALID [2022-02-20 18:12:07,343 INFO L290 TraceCheckUtils]: 11: Hoare triple {19836#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,344 INFO L290 TraceCheckUtils]: 12: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,344 INFO L290 TraceCheckUtils]: 13: Hoare triple {19791#(= 2 ~waterLevel~0)} assume true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,344 INFO L284 TraceCheckUtils]: 14: Hoare quadruple {19791#(= 2 ~waterLevel~0)} {19791#(= 2 ~waterLevel~0)} #239#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 150 [2022-02-20 18:12:07,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,349 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,349 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,349 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19791#(= 2 ~waterLevel~0)} #227#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-02-20 18:12:07,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,353 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,353 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,353 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {19718#true} {19719#false} #233#return; {19719#false} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 1: Hoare triple {19718#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 2: Hoare triple {19718#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 3: Hoare triple {19718#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 4: Hoare triple {19718#true} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 5: Hoare triple {19718#true} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 6: Hoare triple {19718#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {19718#true} is VALID [2022-02-20 18:12:07,354 INFO L290 TraceCheckUtils]: 7: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 8: Hoare triple {19718#true} assume !false; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 9: Hoare triple {19718#true} assume test_~splverifierCounter~0#1 < 4; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 10: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 11: Hoare triple {19718#true} assume 0 != test_~tmp~5#1; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L272 TraceCheckUtils]: 12: Hoare triple {19718#true} call waterRise(); {19815#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 13: Hoare triple {19815#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19718#true} is VALID [2022-02-20 18:12:07,355 INFO L290 TraceCheckUtils]: 14: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19718#true} {19718#true} #235#return; {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L290 TraceCheckUtils]: 16: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L290 TraceCheckUtils]: 17: Hoare triple {19718#true} assume !(0 != test_~tmp___0~1#1); {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L290 TraceCheckUtils]: 18: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L290 TraceCheckUtils]: 19: Hoare triple {19718#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L290 TraceCheckUtils]: 20: Hoare triple {19718#true} assume !(0 != test_~tmp___1~0#1); {19718#true} is VALID [2022-02-20 18:12:07,356 INFO L272 TraceCheckUtils]: 21: Hoare triple {19718#true} call timeShift(); {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 22: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L272 TraceCheckUtils]: 23: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 24: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 25: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 27: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 28: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 29: Hoare triple {19718#true} assume !(0 != ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,357 INFO L290 TraceCheckUtils]: 30: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 31: Hoare triple {19718#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 32: Hoare triple {19718#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 33: Hoare triple {19718#true} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 34: Hoare triple {19718#true} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 35: Hoare triple {19718#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 36: Hoare triple {19718#true} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 37: Hoare triple {19718#true} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 38: Hoare triple {19718#true} assume { :end_inline_activatePump } true; {19718#true} is VALID [2022-02-20 18:12:07,358 INFO L290 TraceCheckUtils]: 39: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 40: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 41: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 42: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 43: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 44: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {19718#true} {19718#true} #239#return; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 46: Hoare triple {19718#true} assume !false; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 47: Hoare triple {19718#true} assume test_~splverifierCounter~0#1 < 4; {19718#true} is VALID [2022-02-20 18:12:07,359 INFO L290 TraceCheckUtils]: 48: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 49: Hoare triple {19718#true} assume !(0 != test_~tmp~5#1); {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 50: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 51: Hoare triple {19718#true} assume !(0 != test_~tmp___0~1#1); {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 52: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 53: Hoare triple {19718#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L290 TraceCheckUtils]: 54: Hoare triple {19718#true} assume !(0 != test_~tmp___1~0#1); {19718#true} is VALID [2022-02-20 18:12:07,360 INFO L272 TraceCheckUtils]: 55: Hoare triple {19718#true} call timeShift(); {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 56: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L272 TraceCheckUtils]: 57: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 58: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 59: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 61: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 62: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 63: Hoare triple {19718#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,361 INFO L290 TraceCheckUtils]: 64: Hoare triple {19718#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 65: Hoare triple {19718#true} assume { :end_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 66: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 67: Hoare triple {19718#true} assume !(0 == ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L272 TraceCheckUtils]: 68: Hoare triple {19718#true} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 69: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 71: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 72: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:07,362 INFO L290 TraceCheckUtils]: 73: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 74: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 75: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 76: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {19718#true} {19718#true} #239#return; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 78: Hoare triple {19718#true} assume !false; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 79: Hoare triple {19718#true} assume test_~splverifierCounter~0#1 < 4; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 80: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 81: Hoare triple {19718#true} assume !(0 != test_~tmp~5#1); {19718#true} is VALID [2022-02-20 18:12:07,363 INFO L290 TraceCheckUtils]: 82: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L290 TraceCheckUtils]: 83: Hoare triple {19718#true} assume !(0 != test_~tmp___0~1#1); {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L290 TraceCheckUtils]: 84: Hoare triple {19718#true} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L290 TraceCheckUtils]: 85: Hoare triple {19718#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L290 TraceCheckUtils]: 86: Hoare triple {19718#true} assume !(0 != test_~tmp___1~0#1); {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L272 TraceCheckUtils]: 87: Hoare triple {19718#true} call timeShift(); {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:07,364 INFO L290 TraceCheckUtils]: 88: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,364 INFO L272 TraceCheckUtils]: 89: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 90: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 91: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 93: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 94: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 95: Hoare triple {19718#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 96: Hoare triple {19718#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 97: Hoare triple {19718#true} assume { :end_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 98: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:07,365 INFO L290 TraceCheckUtils]: 99: Hoare triple {19718#true} assume !(0 == ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,366 INFO L272 TraceCheckUtils]: 100: Hoare triple {19718#true} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:07,366 INFO L290 TraceCheckUtils]: 101: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,366 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:07,366 INFO L290 TraceCheckUtils]: 103: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:07,366 INFO L290 TraceCheckUtils]: 104: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19830#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:07,367 INFO L290 TraceCheckUtils]: 105: Hoare triple {19830#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19831#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:07,367 INFO L290 TraceCheckUtils]: 106: Hoare triple {19831#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,367 INFO L290 TraceCheckUtils]: 107: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,368 INFO L290 TraceCheckUtils]: 108: Hoare triple {19791#(= 2 ~waterLevel~0)} assume true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,368 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {19791#(= 2 ~waterLevel~0)} {19718#true} #239#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,368 INFO L290 TraceCheckUtils]: 110: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !false; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,368 INFO L290 TraceCheckUtils]: 111: Hoare triple {19791#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,369 INFO L290 TraceCheckUtils]: 112: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,369 INFO L290 TraceCheckUtils]: 113: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp~5#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,369 INFO L290 TraceCheckUtils]: 114: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,369 INFO L290 TraceCheckUtils]: 115: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,370 INFO L290 TraceCheckUtils]: 116: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,370 INFO L290 TraceCheckUtils]: 117: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,370 INFO L290 TraceCheckUtils]: 118: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,370 INFO L290 TraceCheckUtils]: 119: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,371 INFO L290 TraceCheckUtils]: 120: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline_deactivatePump } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,371 INFO L290 TraceCheckUtils]: 121: Hoare triple {19791#(= 2 ~waterLevel~0)} ~systemActive~0 := 0; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,372 INFO L290 TraceCheckUtils]: 122: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline_stopSystem } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,372 INFO L272 TraceCheckUtils]: 123: Hoare triple {19791#(= 2 ~waterLevel~0)} call timeShift(); {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:07,372 INFO L290 TraceCheckUtils]: 124: Hoare triple {19816#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,372 INFO L272 TraceCheckUtils]: 125: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,372 INFO L290 TraceCheckUtils]: 126: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,372 INFO L290 TraceCheckUtils]: 127: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L284 TraceCheckUtils]: 128: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L290 TraceCheckUtils]: 129: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L290 TraceCheckUtils]: 130: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L290 TraceCheckUtils]: 131: Hoare triple {19718#true} assume !(0 != ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L290 TraceCheckUtils]: 132: Hoare triple {19718#true} assume !(0 != ~systemActive~0); {19718#true} is VALID [2022-02-20 18:12:07,373 INFO L290 TraceCheckUtils]: 133: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19835#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:07,374 INFO L290 TraceCheckUtils]: 134: Hoare triple {19835#(= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19836#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)} is VALID [2022-02-20 18:12:07,374 INFO L290 TraceCheckUtils]: 135: Hoare triple {19836#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,374 INFO L290 TraceCheckUtils]: 136: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,374 INFO L290 TraceCheckUtils]: 137: Hoare triple {19791#(= 2 ~waterLevel~0)} assume true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,375 INFO L284 TraceCheckUtils]: 138: Hoare quadruple {19791#(= 2 ~waterLevel~0)} {19791#(= 2 ~waterLevel~0)} #239#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,375 INFO L290 TraceCheckUtils]: 139: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !false; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,375 INFO L290 TraceCheckUtils]: 140: Hoare triple {19791#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,376 INFO L290 TraceCheckUtils]: 141: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,376 INFO L290 TraceCheckUtils]: 142: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp~5#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,376 INFO L290 TraceCheckUtils]: 143: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,377 INFO L290 TraceCheckUtils]: 144: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1#1); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,377 INFO L290 TraceCheckUtils]: 145: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,377 INFO L290 TraceCheckUtils]: 146: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,378 INFO L290 TraceCheckUtils]: 147: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline_startSystem } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,378 INFO L272 TraceCheckUtils]: 148: Hoare triple {19791#(= 2 ~waterLevel~0)} call timeShift(); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,378 INFO L290 TraceCheckUtils]: 149: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,378 INFO L272 TraceCheckUtils]: 150: Hoare triple {19791#(= 2 ~waterLevel~0)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,378 INFO L290 TraceCheckUtils]: 151: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,379 INFO L290 TraceCheckUtils]: 152: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,379 INFO L284 TraceCheckUtils]: 153: Hoare quadruple {19718#true} {19791#(= 2 ~waterLevel~0)} #227#return; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,379 INFO L290 TraceCheckUtils]: 154: Hoare triple {19791#(= 2 ~waterLevel~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,379 INFO L290 TraceCheckUtils]: 155: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,380 INFO L290 TraceCheckUtils]: 156: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,380 INFO L290 TraceCheckUtils]: 157: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,380 INFO L290 TraceCheckUtils]: 158: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,380 INFO L290 TraceCheckUtils]: 159: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,381 INFO L290 TraceCheckUtils]: 160: Hoare triple {19791#(= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,381 INFO L290 TraceCheckUtils]: 161: Hoare triple {19791#(= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,381 INFO L290 TraceCheckUtils]: 162: Hoare triple {19791#(= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,381 INFO L290 TraceCheckUtils]: 163: Hoare triple {19791#(= 2 ~waterLevel~0)} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,382 INFO L290 TraceCheckUtils]: 164: Hoare triple {19791#(= 2 ~waterLevel~0)} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,382 INFO L290 TraceCheckUtils]: 165: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,382 INFO L290 TraceCheckUtils]: 166: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {19791#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:07,383 INFO L290 TraceCheckUtils]: 167: Hoare triple {19791#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19810#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:07,383 INFO L290 TraceCheckUtils]: 168: Hoare triple {19810#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19811#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)} is VALID [2022-02-20 18:12:07,383 INFO L290 TraceCheckUtils]: 169: Hoare triple {19811#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {19719#false} is VALID [2022-02-20 18:12:07,383 INFO L272 TraceCheckUtils]: 170: Hoare triple {19719#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:07,383 INFO L290 TraceCheckUtils]: 171: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:07,383 INFO L290 TraceCheckUtils]: 172: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:07,384 INFO L284 TraceCheckUtils]: 173: Hoare quadruple {19718#true} {19719#false} #233#return; {19719#false} is VALID [2022-02-20 18:12:07,384 INFO L290 TraceCheckUtils]: 174: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {19719#false} is VALID [2022-02-20 18:12:07,384 INFO L290 TraceCheckUtils]: 175: Hoare triple {19719#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {19719#false} is VALID [2022-02-20 18:12:07,384 INFO L290 TraceCheckUtils]: 176: Hoare triple {19719#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {19719#false} is VALID [2022-02-20 18:12:07,384 INFO L290 TraceCheckUtils]: 177: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:07,384 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 120 proven. 8 refuted. 0 times theorem prover too weak. 145 trivial. 0 not checked. [2022-02-20 18:12:07,385 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:07,385 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309043155] [2022-02-20 18:12:07,385 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309043155] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:07,385 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [340503201] [2022-02-20 18:12:07,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:07,385 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:07,385 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:07,388 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:07,409 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:12:07,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,562 INFO L263 TraceCheckSpWp]: Trace formula consists of 699 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:07,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,606 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:08,244 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,244 INFO L290 TraceCheckUtils]: 1: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,244 INFO L290 TraceCheckUtils]: 2: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,245 INFO L290 TraceCheckUtils]: 3: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,245 INFO L290 TraceCheckUtils]: 4: Hoare triple {19840#(<= ~waterLevel~0 1)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,245 INFO L290 TraceCheckUtils]: 5: Hoare triple {19840#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,245 INFO L290 TraceCheckUtils]: 6: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,246 INFO L290 TraceCheckUtils]: 7: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,246 INFO L290 TraceCheckUtils]: 8: Hoare triple {19840#(<= ~waterLevel~0 1)} assume !false; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,246 INFO L290 TraceCheckUtils]: 9: Hoare triple {19840#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,246 INFO L290 TraceCheckUtils]: 10: Hoare triple {19840#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,247 INFO L290 TraceCheckUtils]: 11: Hoare triple {19840#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:08,247 INFO L272 TraceCheckUtils]: 12: Hoare triple {19840#(<= ~waterLevel~0 1)} call waterRise(); {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,247 INFO L290 TraceCheckUtils]: 13: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19881#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:08,248 INFO L290 TraceCheckUtils]: 14: Hoare triple {19881#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} assume true; {19881#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:08,248 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {19881#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} {19840#(<= ~waterLevel~0 1)} #235#return; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,248 INFO L290 TraceCheckUtils]: 16: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,252 INFO L290 TraceCheckUtils]: 17: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,252 INFO L290 TraceCheckUtils]: 18: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,252 INFO L290 TraceCheckUtils]: 19: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,252 INFO L290 TraceCheckUtils]: 20: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___1~0#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,253 INFO L272 TraceCheckUtils]: 21: Hoare triple {19888#(<= ~waterLevel~0 2)} call timeShift(); {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,253 INFO L290 TraceCheckUtils]: 22: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,253 INFO L272 TraceCheckUtils]: 23: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:08,253 INFO L290 TraceCheckUtils]: 24: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:08,253 INFO L290 TraceCheckUtils]: 25: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:08,254 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19718#true} {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #227#return; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,254 INFO L290 TraceCheckUtils]: 27: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,254 INFO L290 TraceCheckUtils]: 28: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,256 INFO L290 TraceCheckUtils]: 29: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,257 INFO L290 TraceCheckUtils]: 30: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,257 INFO L290 TraceCheckUtils]: 31: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,257 INFO L290 TraceCheckUtils]: 32: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,257 INFO L290 TraceCheckUtils]: 33: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,258 INFO L290 TraceCheckUtils]: 34: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,258 INFO L290 TraceCheckUtils]: 35: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,258 INFO L290 TraceCheckUtils]: 36: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,258 INFO L290 TraceCheckUtils]: 37: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,259 INFO L290 TraceCheckUtils]: 38: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_activatePump } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,263 INFO L290 TraceCheckUtils]: 39: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,263 INFO L290 TraceCheckUtils]: 40: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,263 INFO L290 TraceCheckUtils]: 41: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,267 INFO L290 TraceCheckUtils]: 42: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,267 INFO L290 TraceCheckUtils]: 43: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,268 INFO L290 TraceCheckUtils]: 44: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,268 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} {19888#(<= ~waterLevel~0 2)} #239#return; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,268 INFO L290 TraceCheckUtils]: 46: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !false; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,269 INFO L290 TraceCheckUtils]: 47: Hoare triple {19888#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,269 INFO L290 TraceCheckUtils]: 48: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,269 INFO L290 TraceCheckUtils]: 49: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,270 INFO L290 TraceCheckUtils]: 50: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,270 INFO L290 TraceCheckUtils]: 51: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,270 INFO L290 TraceCheckUtils]: 52: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,271 INFO L290 TraceCheckUtils]: 53: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,271 INFO L290 TraceCheckUtils]: 54: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___1~0#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:08,271 INFO L272 TraceCheckUtils]: 55: Hoare triple {19888#(<= ~waterLevel~0 2)} call timeShift(); {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,271 INFO L290 TraceCheckUtils]: 56: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,271 INFO L272 TraceCheckUtils]: 57: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:08,271 INFO L290 TraceCheckUtils]: 58: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:08,272 INFO L290 TraceCheckUtils]: 59: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:08,272 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {19718#true} {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #227#return; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,272 INFO L290 TraceCheckUtils]: 61: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,272 INFO L290 TraceCheckUtils]: 62: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,273 INFO L290 TraceCheckUtils]: 63: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,273 INFO L290 TraceCheckUtils]: 64: Hoare triple {19877#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,273 INFO L290 TraceCheckUtils]: 65: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_lowerWaterLevel } true; {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,274 INFO L290 TraceCheckUtils]: 66: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,274 INFO L290 TraceCheckUtils]: 67: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume !(0 == ~pumpRunning~0); {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,274 INFO L272 TraceCheckUtils]: 68: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:08,274 INFO L290 TraceCheckUtils]: 69: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:08,274 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {19718#true} {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} #231#return; {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,275 INFO L290 TraceCheckUtils]: 71: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:08,275 INFO L290 TraceCheckUtils]: 72: Hoare triple {20036#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20061#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,281 INFO L290 TraceCheckUtils]: 73: Hoare triple {20061#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {20065#(and (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,282 INFO L290 TraceCheckUtils]: 74: Hoare triple {20065#(and (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,282 INFO L290 TraceCheckUtils]: 75: Hoare triple {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,282 INFO L290 TraceCheckUtils]: 76: Hoare triple {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume true; {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:08,283 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {20069#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} {19888#(<= ~waterLevel~0 2)} #239#return; {19719#false} is VALID [2022-02-20 18:12:08,283 INFO L290 TraceCheckUtils]: 78: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:08,283 INFO L290 TraceCheckUtils]: 79: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 80: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 81: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 82: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 83: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 84: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 85: Hoare triple {19719#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 86: Hoare triple {19719#false} assume !(0 != test_~tmp___1~0#1); {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L272 TraceCheckUtils]: 87: Hoare triple {19719#false} call timeShift(); {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 88: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L272 TraceCheckUtils]: 89: Hoare triple {19719#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 90: Hoare triple {19719#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 91: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {19719#false} {19719#false} #227#return; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 93: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 94: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 95: Hoare triple {19719#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 96: Hoare triple {19719#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19719#false} is VALID [2022-02-20 18:12:08,284 INFO L290 TraceCheckUtils]: 97: Hoare triple {19719#false} assume { :end_inline_lowerWaterLevel } true; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 98: Hoare triple {19719#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 99: Hoare triple {19719#false} assume !(0 == ~pumpRunning~0); {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L272 TraceCheckUtils]: 100: Hoare triple {19719#false} call processEnvironment__wrappee__base(); {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 101: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {19719#false} {19719#false} #231#return; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 103: Hoare triple {19719#false} assume { :end_inline_processEnvironment } true; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 104: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 105: Hoare triple {19719#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 106: Hoare triple {19719#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 107: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 108: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {19719#false} {19719#false} #239#return; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 110: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 111: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 112: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 113: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 114: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 115: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 116: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 117: Hoare triple {19719#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19719#false} is VALID [2022-02-20 18:12:08,285 INFO L290 TraceCheckUtils]: 118: Hoare triple {19719#false} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 119: Hoare triple {19719#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 120: Hoare triple {19719#false} assume { :end_inline_deactivatePump } true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 121: Hoare triple {19719#false} ~systemActive~0 := 0; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 122: Hoare triple {19719#false} assume { :end_inline_stopSystem } true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L272 TraceCheckUtils]: 123: Hoare triple {19719#false} call timeShift(); {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 124: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L272 TraceCheckUtils]: 125: Hoare triple {19719#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 126: Hoare triple {19719#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 127: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L284 TraceCheckUtils]: 128: Hoare quadruple {19719#false} {19719#false} #227#return; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 129: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 130: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 131: Hoare triple {19719#false} assume !(0 != ~pumpRunning~0); {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 132: Hoare triple {19719#false} assume !(0 != ~systemActive~0); {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 133: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 134: Hoare triple {19719#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 135: Hoare triple {19719#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 136: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L290 TraceCheckUtils]: 137: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,286 INFO L284 TraceCheckUtils]: 138: Hoare quadruple {19719#false} {19719#false} #239#return; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 139: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 140: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 141: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 142: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 143: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 144: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 145: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 146: Hoare triple {19719#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 147: Hoare triple {19719#false} assume { :end_inline_startSystem } true; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L272 TraceCheckUtils]: 148: Hoare triple {19719#false} call timeShift(); {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 149: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L272 TraceCheckUtils]: 150: Hoare triple {19719#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 151: Hoare triple {19719#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 152: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L284 TraceCheckUtils]: 153: Hoare quadruple {19719#false} {19719#false} #227#return; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 154: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 155: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 156: Hoare triple {19719#false} assume !(0 != ~pumpRunning~0); {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 157: Hoare triple {19719#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 158: Hoare triple {19719#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19719#false} is VALID [2022-02-20 18:12:08,287 INFO L290 TraceCheckUtils]: 159: Hoare triple {19719#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 160: Hoare triple {19719#false} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 161: Hoare triple {19719#false} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 162: Hoare triple {19719#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 163: Hoare triple {19719#false} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 164: Hoare triple {19719#false} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 165: Hoare triple {19719#false} assume { :end_inline_activatePump } true; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 166: Hoare triple {19719#false} assume { :end_inline_processEnvironment } true; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 167: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 168: Hoare triple {19719#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 169: Hoare triple {19719#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L272 TraceCheckUtils]: 170: Hoare triple {19719#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 171: Hoare triple {19719#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 172: Hoare triple {19719#false} assume true; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L284 TraceCheckUtils]: 173: Hoare quadruple {19719#false} {19719#false} #233#return; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 174: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 175: Hoare triple {19719#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 176: Hoare triple {19719#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {19719#false} is VALID [2022-02-20 18:12:08,288 INFO L290 TraceCheckUtils]: 177: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:08,289 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 177 proven. 4 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2022-02-20 18:12:08,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 177: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 176: Hoare triple {19719#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 175: Hoare triple {19719#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 174: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret46#1 && __utac_acc__Specification5_spec__3_#t~ret46#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret46#1;havoc __utac_acc__Specification5_spec__3_#t~ret46#1; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L284 TraceCheckUtils]: 173: Hoare quadruple {19718#true} {19719#false} #233#return; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 172: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 171: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,563 INFO L272 TraceCheckUtils]: 170: Hoare triple {19719#false} call __utac_acc__Specification5_spec__3_#t~ret46#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 169: Hoare triple {19719#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~7#1; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 168: Hoare triple {19719#false} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 167: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 166: Hoare triple {19719#false} assume { :end_inline_processEnvironment } true; {19719#false} is VALID [2022-02-20 18:12:09,563 INFO L290 TraceCheckUtils]: 165: Hoare triple {19719#false} assume { :end_inline_activatePump } true; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 164: Hoare triple {19719#false} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 163: Hoare triple {19719#false} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 162: Hoare triple {19719#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 161: Hoare triple {19719#false} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 160: Hoare triple {19719#false} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 159: Hoare triple {19719#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 158: Hoare triple {19719#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 157: Hoare triple {19719#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 156: Hoare triple {19719#false} assume !(0 != ~pumpRunning~0); {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 155: Hoare triple {19719#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 154: Hoare triple {19719#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L284 TraceCheckUtils]: 153: Hoare quadruple {19718#true} {19719#false} #227#return; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 152: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 151: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,564 INFO L272 TraceCheckUtils]: 150: Hoare triple {19719#false} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 149: Hoare triple {19719#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L272 TraceCheckUtils]: 148: Hoare triple {19719#false} call timeShift(); {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 147: Hoare triple {19719#false} assume { :end_inline_startSystem } true; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 146: Hoare triple {19719#false} assume 0 != test_~tmp___2~0#1;assume { :begin_inline_startSystem } true;~systemActive~0 := 1; {19719#false} is VALID [2022-02-20 18:12:09,564 INFO L290 TraceCheckUtils]: 145: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 144: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 143: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 142: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 141: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 140: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 139: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L284 TraceCheckUtils]: 138: Hoare quadruple {19718#true} {19719#false} #239#return; {19719#false} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 137: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 136: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 135: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:09,565 INFO L290 TraceCheckUtils]: 134: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 133: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 132: Hoare triple {19718#true} assume !(0 != ~systemActive~0); {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 131: Hoare triple {19718#true} assume !(0 != ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 130: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 129: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L284 TraceCheckUtils]: 128: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 127: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 126: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L272 TraceCheckUtils]: 125: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 124: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L272 TraceCheckUtils]: 123: Hoare triple {19719#false} call timeShift(); {19718#true} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 122: Hoare triple {19719#false} assume { :end_inline_stopSystem } true; {19719#false} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 121: Hoare triple {19719#false} ~systemActive~0 := 0; {19719#false} is VALID [2022-02-20 18:12:09,568 INFO L290 TraceCheckUtils]: 120: Hoare triple {19719#false} assume { :end_inline_deactivatePump } true; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 119: Hoare triple {19719#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 118: Hoare triple {19719#false} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 117: Hoare triple {19719#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 116: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 115: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 114: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 113: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 112: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 111: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 110: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L284 TraceCheckUtils]: 109: Hoare quadruple {19718#true} {19719#false} #239#return; {19719#false} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 108: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 107: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {19718#true} is VALID [2022-02-20 18:12:09,569 INFO L290 TraceCheckUtils]: 106: Hoare triple {19718#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 105: Hoare triple {19718#true} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 104: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 103: Hoare triple {19718#true} assume { :end_inline_processEnvironment } true; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {19718#true} {19718#true} #231#return; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 101: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L272 TraceCheckUtils]: 100: Hoare triple {19718#true} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 99: Hoare triple {19718#true} assume !(0 == ~pumpRunning~0); {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 98: Hoare triple {19718#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 97: Hoare triple {19718#true} assume { :end_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 96: Hoare triple {19718#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 95: Hoare triple {19718#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 94: Hoare triple {19718#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L290 TraceCheckUtils]: 93: Hoare triple {19718#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:09,570 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {19718#true} {19718#true} #227#return; {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 91: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 90: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L272 TraceCheckUtils]: 89: Hoare triple {19718#true} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 88: Hoare triple {19718#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L272 TraceCheckUtils]: 87: Hoare triple {19719#false} call timeShift(); {19718#true} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 86: Hoare triple {19719#false} assume !(0 != test_~tmp___1~0#1); {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 85: Hoare triple {19719#false} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 84: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 83: Hoare triple {19719#false} assume !(0 != test_~tmp___0~1#1); {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 82: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 81: Hoare triple {19719#false} assume !(0 != test_~tmp~5#1); {19719#false} is VALID [2022-02-20 18:12:09,571 INFO L290 TraceCheckUtils]: 80: Hoare triple {19719#false} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19719#false} is VALID [2022-02-20 18:12:09,579 INFO L290 TraceCheckUtils]: 79: Hoare triple {19719#false} assume test_~splverifierCounter~0#1 < 4; {19719#false} is VALID [2022-02-20 18:12:09,579 INFO L290 TraceCheckUtils]: 78: Hoare triple {19719#false} assume !false; {19719#false} is VALID [2022-02-20 18:12:09,580 INFO L284 TraceCheckUtils]: 77: Hoare quadruple {20682#(< 2 |old(~waterLevel~0)|)} {19888#(<= ~waterLevel~0 2)} #239#return; {19719#false} is VALID [2022-02-20 18:12:09,580 INFO L290 TraceCheckUtils]: 76: Hoare triple {20682#(< 2 |old(~waterLevel~0)|)} assume true; {20682#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:09,580 INFO L290 TraceCheckUtils]: 75: Hoare triple {20682#(< 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20682#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:09,581 INFO L290 TraceCheckUtils]: 74: Hoare triple {20692#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1|)) (< 2 |old(~waterLevel~0)|))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {20682#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:09,581 INFO L290 TraceCheckUtils]: 73: Hoare triple {20696#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {20692#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1|)) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,582 INFO L290 TraceCheckUtils]: 72: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20696#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,582 INFO L290 TraceCheckUtils]: 71: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_processEnvironment } true; {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,582 INFO L284 TraceCheckUtils]: 70: Hoare quadruple {19718#true} {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} #231#return; {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,582 INFO L290 TraceCheckUtils]: 69: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,582 INFO L272 TraceCheckUtils]: 68: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} call processEnvironment__wrappee__base(); {19718#true} is VALID [2022-02-20 18:12:09,583 INFO L290 TraceCheckUtils]: 67: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume !(0 == ~pumpRunning~0); {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,583 INFO L290 TraceCheckUtils]: 66: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,583 INFO L290 TraceCheckUtils]: 65: Hoare triple {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_lowerWaterLevel } true; {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,584 INFO L290 TraceCheckUtils]: 64: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20700#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:09,584 INFO L290 TraceCheckUtils]: 63: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,584 INFO L290 TraceCheckUtils]: 62: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,585 INFO L290 TraceCheckUtils]: 61: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,585 INFO L284 TraceCheckUtils]: 60: Hoare quadruple {19718#true} {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #227#return; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,585 INFO L290 TraceCheckUtils]: 59: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,585 INFO L290 TraceCheckUtils]: 58: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,585 INFO L272 TraceCheckUtils]: 57: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,585 INFO L290 TraceCheckUtils]: 56: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,586 INFO L272 TraceCheckUtils]: 55: Hoare triple {19888#(<= ~waterLevel~0 2)} call timeShift(); {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,586 INFO L290 TraceCheckUtils]: 54: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___1~0#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,587 INFO L290 TraceCheckUtils]: 53: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,587 INFO L290 TraceCheckUtils]: 52: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,587 INFO L290 TraceCheckUtils]: 51: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,587 INFO L290 TraceCheckUtils]: 50: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,588 INFO L290 TraceCheckUtils]: 49: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,588 INFO L290 TraceCheckUtils]: 48: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,588 INFO L290 TraceCheckUtils]: 47: Hoare triple {19888#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,589 INFO L290 TraceCheckUtils]: 46: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !false; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,589 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} {19888#(<= ~waterLevel~0 2)} #239#return; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,590 INFO L290 TraceCheckUtils]: 44: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,590 INFO L290 TraceCheckUtils]: 43: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,590 INFO L290 TraceCheckUtils]: 42: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~7#1); {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,591 INFO L290 TraceCheckUtils]: 41: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} __utac_acc__Specification5_spec__3_#t~ret45#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret45#1 && __utac_acc__Specification5_spec__3_#t~ret45#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~7#1 := __utac_acc__Specification5_spec__3_#t~ret45#1;havoc __utac_acc__Specification5_spec__3_#t~ret45#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,591 INFO L290 TraceCheckUtils]: 40: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret45#1, __utac_acc__Specification5_spec__3_#t~ret46#1, __utac_acc__Specification5_spec__3_~tmp~7#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~7#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,591 INFO L290 TraceCheckUtils]: 39: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_processEnvironment } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,592 INFO L290 TraceCheckUtils]: 38: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_activatePump } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,592 INFO L290 TraceCheckUtils]: 37: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != processEnvironment_~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,593 INFO L290 TraceCheckUtils]: 36: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} processEnvironment_#t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= processEnvironment_#t~ret5#1 && processEnvironment_#t~ret5#1 <= 2147483647;processEnvironment_~tmp~0#1 := processEnvironment_#t~ret5#1;havoc processEnvironment_#t~ret5#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,593 INFO L290 TraceCheckUtils]: 35: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,593 INFO L290 TraceCheckUtils]: 34: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != isHighWaterLevel_~tmp~1#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,594 INFO L290 TraceCheckUtils]: 33: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} isHighWaterLevel_#t~ret15#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret15#1 && isHighWaterLevel_#t~ret15#1 <= 2147483647;isHighWaterLevel_~tmp~1#1 := isHighWaterLevel_#t~ret15#1;havoc isHighWaterLevel_#t~ret15#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,594 INFO L290 TraceCheckUtils]: 32: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,595 INFO L290 TraceCheckUtils]: 31: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret15#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~1#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~1#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,595 INFO L290 TraceCheckUtils]: 30: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret5#1, processEnvironment_~tmp~0#1;havoc processEnvironment_~tmp~0#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,595 INFO L290 TraceCheckUtils]: 29: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,595 INFO L290 TraceCheckUtils]: 28: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,596 INFO L290 TraceCheckUtils]: 27: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret44#1 && __utac_acc__Specification5_spec__2_#t~ret44#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret44#1;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,596 INFO L284 TraceCheckUtils]: 26: Hoare quadruple {19718#true} {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #227#return; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,596 INFO L290 TraceCheckUtils]: 25: Hoare triple {19718#true} assume true; {19718#true} is VALID [2022-02-20 18:12:09,596 INFO L290 TraceCheckUtils]: 24: Hoare triple {19718#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {19718#true} is VALID [2022-02-20 18:12:09,596 INFO L272 TraceCheckUtils]: 23: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret44#1 := isPumpRunning(); {19718#true} is VALID [2022-02-20 18:12:09,597 INFO L290 TraceCheckUtils]: 22: Hoare triple {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret44#1; {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,597 INFO L272 TraceCheckUtils]: 21: Hoare triple {19888#(<= ~waterLevel~0 2)} call timeShift(); {20725#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:09,597 INFO L290 TraceCheckUtils]: 20: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___1~0#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,598 INFO L290 TraceCheckUtils]: 19: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet42#1 && test_#t~nondet42#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet42#1;havoc test_#t~nondet42#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,598 INFO L290 TraceCheckUtils]: 18: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet41#1 && test_#t~nondet41#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet41#1;havoc test_#t~nondet41#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,598 INFO L290 TraceCheckUtils]: 17: Hoare triple {19888#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,598 INFO L290 TraceCheckUtils]: 16: Hoare triple {19888#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet40#1 && test_#t~nondet40#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet40#1;havoc test_#t~nondet40#1; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,599 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20873#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} {19840#(<= ~waterLevel~0 1)} #235#return; {19888#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:09,599 INFO L290 TraceCheckUtils]: 14: Hoare triple {20873#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} assume true; {20873#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:09,599 INFO L290 TraceCheckUtils]: 13: Hoare triple {20880#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20873#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:09,600 INFO L272 TraceCheckUtils]: 12: Hoare triple {19840#(<= ~waterLevel~0 1)} call waterRise(); {20880#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:09,600 INFO L290 TraceCheckUtils]: 11: Hoare triple {19840#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,600 INFO L290 TraceCheckUtils]: 10: Hoare triple {19840#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet39#1 && test_#t~nondet39#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet39#1;havoc test_#t~nondet39#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,600 INFO L290 TraceCheckUtils]: 9: Hoare triple {19840#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,601 INFO L290 TraceCheckUtils]: 8: Hoare triple {19840#(<= ~waterLevel~0 1)} assume !false; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,601 INFO L290 TraceCheckUtils]: 7: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet39#1, test_#t~nondet40#1, test_#t~nondet41#1, test_#t~nondet42#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,601 INFO L290 TraceCheckUtils]: 6: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,601 INFO L290 TraceCheckUtils]: 5: Hoare triple {19840#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~6#1;assume { :begin_inline_setup } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,602 INFO L290 TraceCheckUtils]: 4: Hoare triple {19840#(<= ~waterLevel~0 1)} main_#t~ret43#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret43#1 && main_#t~ret43#1 <= 2147483647;main_~tmp~6#1 := main_#t~ret43#1;havoc main_#t~ret43#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,602 INFO L290 TraceCheckUtils]: 3: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,602 INFO L290 TraceCheckUtils]: 2: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,602 INFO L290 TraceCheckUtils]: 1: Hoare triple {19840#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret43#1, main_~retValue_acc~8#1, main_~tmp~6#1;havoc main_~retValue_acc~8#1;havoc main_~tmp~6#1;assume { :begin_inline_select_helpers } true; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,604 INFO L290 TraceCheckUtils]: 0: Hoare triple {19718#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {19840#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:09,615 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 114 proven. 61 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-02-20 18:12:09,616 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [340503201] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:09,616 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:09,616 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-02-20 18:12:09,616 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661591395] [2022-02-20 18:12:09,616 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:09,617 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) Word has length 178 [2022-02-20 18:12:09,624 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:09,627 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) [2022-02-20 18:12:09,777 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 267 edges. 267 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:09,777 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-02-20 18:12:09,777 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:09,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-02-20 18:12:09,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=528, Unknown=0, NotChecked=0, Total=650 [2022-02-20 18:12:09,778 INFO L87 Difference]: Start difference. First operand 580 states and 688 transitions. Second operand has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) [2022-02-20 18:12:12,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:12,026 INFO L93 Difference]: Finished difference Result 1348 states and 1641 transitions. [2022-02-20 18:12:12,026 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-02-20 18:12:12,027 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) Word has length 178 [2022-02-20 18:12:12,027 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:12,027 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) [2022-02-20 18:12:12,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 290 transitions. [2022-02-20 18:12:12,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) [2022-02-20 18:12:12,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 290 transitions. [2022-02-20 18:12:12,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 21 states and 290 transitions. [2022-02-20 18:12:12,220 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:12,220 INFO L225 Difference]: With dead ends: 1348 [2022-02-20 18:12:12,220 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:12:12,223 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 416 GetRequests, 373 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=371, Invalid=1351, Unknown=0, NotChecked=0, Total=1722 [2022-02-20 18:12:12,223 INFO L933 BasicCegarLoop]: 123 mSDtfsCounter, 495 mSDsluCounter, 1001 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 498 SdHoareTripleChecker+Valid, 1124 SdHoareTripleChecker+Invalid, 767 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:12,223 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [498 Valid, 1124 Invalid, 767 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-02-20 18:12:12,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:12:12,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:12:12,224 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:12,224 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:12,224 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:12,224 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:12,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:12,224 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:12,224 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:12,224 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:12,224 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:12,224 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:12,225 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:12,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:12,225 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:12,225 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:12,225 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:12,225 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:12,226 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:12,226 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:12,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:12,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:12:12,226 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 178 [2022-02-20 18:12:12,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:12,226 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:12:12,227 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.5) internal successors, (221), 23 states have internal predecessors, (221), 9 states have call successors, (22), 8 states have call predecessors, (22), 9 states have return successors, (24), 8 states have call predecessors, (24), 9 states have call successors, (24) [2022-02-20 18:12:12,227 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:12,227 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:12,229 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:12,251 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:12,443 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:12:12,445 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:12:18,436 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 140 146) no Hoare annotation was computed. [2022-02-20 18:12:18,436 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 140 146) the Hoare annotation is: true [2022-02-20 18:12:18,436 INFO L861 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 900 911) the Hoare annotation is: true [2022-02-20 18:12:18,436 INFO L858 garLoopResultBuilder]: For program point L904-1(lines 900 911) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 900 911) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 727 756) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L861 garLoopResultBuilder]: At program point L737-2(lines 737 751) the Hoare annotation is: true [2022-02-20 18:12:18,437 INFO L861 garLoopResultBuilder]: At program point L733(line 733) the Hoare annotation is: true [2022-02-20 18:12:18,437 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 727 756) the Hoare annotation is: true [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L733-1(line 733) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L861 garLoopResultBuilder]: At program point L752(lines 727 756) the Hoare annotation is: true [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L748(line 748) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L861 garLoopResultBuilder]: At program point L741-1(lines 741 745) the Hoare annotation is: true [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L738(line 738) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L254(lines 254 258) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L854 garLoopResultBuilder]: At program point L93(lines 88 95) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 .cse1))) [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L254-2(lines 254 258) no Hoare annotation was computed. [2022-02-20 18:12:18,437 INFO L858 garLoopResultBuilder]: For program point L857(lines 857 863) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L854 garLoopResultBuilder]: At program point L841(lines 834 843) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and (<= 1 ~pumpRunning~0) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5 .cse3) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:18,438 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 113 139) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L858 garLoopResultBuilder]: For program point L127-1(lines 127 133) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L858 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L858 garLoopResultBuilder]: For program point L156(lines 156 164) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L858 garLoopResultBuilder]: For program point L152(lines 152 169) no Hoare annotation was computed. [2022-02-20 18:12:18,438 INFO L854 garLoopResultBuilder]: At program point L854(line 854) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse14 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (and .cse4 .cse5 .cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse8)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9) (or .cse10 .cse1 .cse11 .cse12) (or .cse0 .cse10 .cse1 (and (= |timeShift_processEnvironment_~tmp~0#1| 0) .cse13 .cse5 .cse6 .cse7)) (or .cse10 .cse12 (and .cse13 .cse5 .cse14 .cse6 .cse7) (not (= 0 ~systemActive~0))) (or .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse9) (or .cse1 .cse2 .cse11 (= ~waterLevel~0 1) .cse12)))) [2022-02-20 18:12:18,438 INFO L854 garLoopResultBuilder]: At program point L949(lines 944 952) the Hoare annotation is: (let ((.cse8 (<= 1 ~pumpRunning~0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse13 (= 1 ~systemActive~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (and .cse8 .cse9 (<= ~waterLevel~0 1) .cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse10)) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse5 (not .cse13)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2) .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or .cse5 .cse6 .cse7 (and .cse8 .cse9 .cse2 .cse10) .cse11 .cse12) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse7 .cse12) (or .cse3 (and (= |timeShift_processEnvironment_~tmp~0#1| 0) .cse0 .cse9 .cse2) .cse5 .cse11 (and .cse8 (= 2 ~waterLevel~0) .cse1 .cse2)) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 (and .cse0 .cse9 .cse2) .cse4) (or .cse5 .cse6 (not (< 1 |old(~waterLevel~0)|)) .cse11 (and .cse8 .cse9 (= ~waterLevel~0 1) .cse10))))) [2022-02-20 18:12:18,439 INFO L858 garLoopResultBuilder]: For program point L854-1(line 854) no Hoare annotation was computed. [2022-02-20 18:12:18,439 INFO L854 garLoopResultBuilder]: At program point L260(lines 245 263) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1) (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse2 (and .cse4 (= |timeShift_isHighWaterLevel_~tmp___0~0#1| 0) (= |timeShift_isHighWaterLevel_#res#1| 0) .cse5) (and .cse4 (= 2 ~waterLevel~0) .cse5) .cse1)) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:18,439 INFO L854 garLoopResultBuilder]: At program point L962(lines 953 966) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse2 (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse3 .cse4) (and .cse3 (= 2 ~waterLevel~0) .cse4) .cse1)) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:18,439 INFO L858 garLoopResultBuilder]: For program point L120(lines 120 126) no Hoare annotation was computed. [2022-02-20 18:12:18,439 INFO L858 garLoopResultBuilder]: For program point L120-2(lines 116 138) no Hoare annotation was computed. [2022-02-20 18:12:18,439 INFO L854 garLoopResultBuilder]: At program point L178(lines 173 180) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 .cse1 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:18,439 INFO L858 garLoopResultBuilder]: For program point L880(lines 880 884) no Hoare annotation was computed. [2022-02-20 18:12:18,440 INFO L854 garLoopResultBuilder]: At program point L880-2(lines 876 887) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse8 (= 1 ~systemActive~0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and .cse4 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse8)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) .cse6 .cse2 .cse3) (or .cse7 .cse6 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse7 .cse0 .cse6) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse6)))) [2022-02-20 18:12:18,440 INFO L854 garLoopResultBuilder]: At program point L839(line 839) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse9)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse7 .cse1 .cse8) (or .cse7 .cse2 .cse4 (and .cse5 .cse6 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse8)))) [2022-02-20 18:12:18,440 INFO L858 garLoopResultBuilder]: For program point L839-1(line 839) no Hoare annotation was computed. [2022-02-20 18:12:18,440 INFO L854 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 .cse1 (and (= |timeShift_processEnvironment_~tmp~0#1| 0) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-02-20 18:12:18,440 INFO L858 garLoopResultBuilder]: For program point L92(line 92) no Hoare annotation was computed. [2022-02-20 18:12:18,440 INFO L858 garLoopResultBuilder]: For program point L856(lines 856 866) no Hoare annotation was computed. [2022-02-20 18:12:18,440 INFO L858 garLoopResultBuilder]: For program point L852(lines 852 869) no Hoare annotation was computed. [2022-02-20 18:12:18,440 INFO L854 garLoopResultBuilder]: At program point L852-1(lines 844 872) the Hoare annotation is: (let ((.cse2 (<= 1 ~pumpRunning~0)) (.cse3 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| ~waterLevel~0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (and .cse2 .cse3 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4 .cse5)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse7 (and .cse2 .cse3 .cse4 .cse8 .cse5) .cse9) (or .cse10 .cse0 (and (= |timeShift_processEnvironment_~tmp~0#1| 0) .cse11 .cse3 .cse4 .cse8) (and .cse2 (= 2 |timeShift_getWaterLevel_#res#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~7#1| 2) .cse4 .cse8) .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse7 .cse9) (or .cse10 .cse6 (and .cse11 .cse3 .cse4 .cse8) (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:18,441 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 113 139) the Hoare annotation is: (let ((.cse6 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (and (= ~pumpRunning~0 0) .cse6 .cse9)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or .cse0 .cse7 .cse1 .cse8) (or .cse7 .cse2 .cse4 (and .cse5 .cse6 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse8)))) [2022-02-20 18:12:18,441 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 113 139) no Hoare annotation was computed. [2022-02-20 18:12:18,441 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 92) no Hoare annotation was computed. [2022-02-20 18:12:18,441 INFO L854 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse8 (= 1 ~systemActive~0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and .cse4 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse8)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) .cse6 .cse2 .cse3) (or .cse7 .cse6 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse7 .cse0 .cse6) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse6)))) [2022-02-20 18:12:18,441 INFO L854 garLoopResultBuilder]: At program point L167-1(lines 148 172) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse11 (= 1 ~systemActive~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (and .cse4 (<= ~waterLevel~0 1) .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (= |timeShift_processEnvironment_~tmp~0#1| 0) (= ~pumpRunning~0 0) .cse11 .cse5)) (.cse9 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not .cse11)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (and .cse4 .cse5 .cse6) .cse7 .cse2 .cse3) (or .cse8 .cse7 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse9 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse10) (or .cse8 .cse0 .cse10 (and .cse4 .cse5) .cse9) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse7)))) [2022-02-20 18:12:18,441 INFO L854 garLoopResultBuilder]: At program point L717(lines 666 718) the Hoare annotation is: false [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point L705(lines 705 711) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L854 garLoopResultBuilder]: At program point L705-2(lines 697 712) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point L668(lines 667 716) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L854 garLoopResultBuilder]: At program point L284(lines 279 286) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:18,442 INFO L858 garLoopResultBuilder]: For program point L697(lines 697 712) no Hoare annotation was computed. [2022-02-20 18:12:18,442 INFO L854 garLoopResultBuilder]: At program point L276(lines 264 278) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2022-02-20 18:12:18,443 INFO L854 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:18,443 INFO L858 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2022-02-20 18:12:18,443 INFO L858 garLoopResultBuilder]: For program point L268-2(lines 268 274) no Hoare annotation was computed. [2022-02-20 18:12:18,443 INFO L854 garLoopResultBuilder]: At program point L714(lines 667 716) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse6 .cse2) (and .cse4 .cse1 .cse6 .cse2) (and .cse0 .cse5 .cse6 .cse2))) [2022-02-20 18:12:18,443 INFO L858 garLoopResultBuilder]: For program point L677(lines 677 683) no Hoare annotation was computed. [2022-02-20 18:12:18,443 INFO L858 garLoopResultBuilder]: For program point L677-1(lines 677 683) no Hoare annotation was computed. [2022-02-20 18:12:18,444 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:12:18,444 INFO L858 garLoopResultBuilder]: For program point L669(lines 669 673) no Hoare annotation was computed. [2022-02-20 18:12:18,444 INFO L861 garLoopResultBuilder]: At program point L797(lines 789 799) the Hoare annotation is: true [2022-02-20 18:12:18,444 INFO L854 garLoopResultBuilder]: At program point L186(lines 181 188) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and (not (= ~switchedOnBeforeTS~0 0)) .cse0 .cse1 .cse2 .cse3) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3))) [2022-02-20 18:12:18,444 INFO L854 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:18,444 INFO L854 garLoopResultBuilder]: At program point L785(lines 781 787) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:18,444 INFO L854 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:18,444 INFO L858 garLoopResultBuilder]: For program point L810(lines 810 817) no Hoare annotation was computed. [2022-02-20 18:12:18,445 INFO L858 garLoopResultBuilder]: For program point L810-2(lines 810 817) no Hoare annotation was computed. [2022-02-20 18:12:18,445 INFO L854 garLoopResultBuilder]: At program point L831(lines 826 833) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:18,445 INFO L861 garLoopResultBuilder]: At program point L819(lines 800 822) the Hoare annotation is: true [2022-02-20 18:12:18,445 INFO L861 garLoopResultBuilder]: At program point L720(lines 657 724) the Hoare annotation is: true [2022-02-20 18:12:18,445 INFO L858 garLoopResultBuilder]: For program point L687(lines 687 693) no Hoare annotation was computed. [2022-02-20 18:12:18,445 INFO L858 garLoopResultBuilder]: For program point L687-1(lines 687 693) no Hoare annotation was computed. [2022-02-20 18:12:18,445 INFO L854 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse6 .cse2) (and .cse4 .cse1 .cse6 .cse2) (and .cse0 .cse5 .cse6 .cse2))) [2022-02-20 18:12:18,445 INFO L854 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:18,447 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 888 899) no Hoare annotation was computed. [2022-02-20 18:12:18,447 INFO L858 garLoopResultBuilder]: For program point L892-1(lines 888 899) no Hoare annotation was computed. [2022-02-20 18:12:18,447 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 888 899) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse5 .cse4 .cse0 .cse3) (or .cse4 .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (= 0 ~systemActive~0))) (or .cse5 .cse0 .cse1 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:18,447 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 200 208) no Hoare annotation was computed. [2022-02-20 18:12:18,447 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 200 208) the Hoare annotation is: true [2022-02-20 18:12:18,447 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 200 208) no Hoare annotation was computed. [2022-02-20 18:12:18,450 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:18,451 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:18,453 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:18,453 WARN L170 areAnnotationChecker]: L904-1 has no Hoare annotation [2022-02-20 18:12:18,453 WARN L170 areAnnotationChecker]: L904-1 has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: L892-1 has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: L892-1 has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: L904-1 has no Hoare annotation [2022-02-20 18:12:18,456 WARN L170 areAnnotationChecker]: L733-1 has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: L839-1 has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: L892-1 has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: L127-1 has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:12:18,457 WARN L170 areAnnotationChecker]: L733-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L839-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L127-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L687-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L738 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L677-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L854-1 has no Hoare annotation [2022-02-20 18:12:18,458 WARN L170 areAnnotationChecker]: L852 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L738 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L810 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L687 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L687 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L856 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L856 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L852 has no Hoare annotation [2022-02-20 18:12:18,459 WARN L170 areAnnotationChecker]: L852 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L705 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L705 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L741 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L741 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L810 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L810 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L687-1 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L857 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L857 has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:18,461 WARN L170 areAnnotationChecker]: L854-1 has no Hoare annotation [2022-02-20 18:12:18,462 WARN L170 areAnnotationChecker]: L268 has no Hoare annotation [2022-02-20 18:12:18,462 WARN L170 areAnnotationChecker]: L268 has no Hoare annotation [2022-02-20 18:12:18,462 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L152 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L152 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L810-2 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L92 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: L92 has no Hoare annotation [2022-02-20 18:12:18,463 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:18,465 WARN L170 areAnnotationChecker]: L668 has no Hoare annotation [2022-02-20 18:12:18,465 WARN L170 areAnnotationChecker]: L268-2 has no Hoare annotation [2022-02-20 18:12:18,465 WARN L170 areAnnotationChecker]: L268-2 has no Hoare annotation [2022-02-20 18:12:18,465 WARN L170 areAnnotationChecker]: L810-2 has no Hoare annotation [2022-02-20 18:12:18,465 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2022-02-20 18:12:18,466 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2022-02-20 18:12:18,466 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2022-02-20 18:12:18,466 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:18,468 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:18,468 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:18,468 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:18,468 WARN L170 areAnnotationChecker]: L668 has no Hoare annotation [2022-02-20 18:12:18,468 WARN L170 areAnnotationChecker]: L668 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L254 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L254 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L254 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L677 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L677 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L254-2 has no Hoare annotation [2022-02-20 18:12:18,469 WARN L170 areAnnotationChecker]: L677-1 has no Hoare annotation [2022-02-20 18:12:18,470 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2022-02-20 18:12:18,470 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2022-02-20 18:12:18,470 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2022-02-20 18:12:18,473 INFO L163 areAnnotationChecker]: CFG has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:12:18,496 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:12:18 BoogieIcfgContainer [2022-02-20 18:12:18,496 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:12:18,497 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:12:18,497 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:12:18,497 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:12:18,498 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:56" (3/4) ... [2022-02-20 18:12:18,499 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:12:18,503 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:12:18,513 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 48 nodes and edges [2022-02-20 18:12:18,513 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:12:18,514 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:12:18,515 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:12:18,515 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:12:18,515 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:18,515 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:18,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) [2022-02-20 18:12:18,533 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:18,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((tmp == 0 && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && 2 == \result) && tmp == 2) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) [2022-02-20 18:12:18,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:18,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:18,534 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((1 <= pumpRunning && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (((tmp == 0 && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-02-20 18:12:18,535 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\result == 1 && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && 2 == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:18,535 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && 2 == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:18,535 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:18,560 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:12:18,560 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:12:18,561 INFO L158 Benchmark]: Toolchain (without parser) took 22469.57ms. Allocated memory was 117.4MB in the beginning and 249.6MB in the end (delta: 132.1MB). Free memory was 84.8MB in the beginning and 131.6MB in the end (delta: -46.8MB). Peak memory consumption was 85.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,561 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 81.8MB. Free memory was 37.4MB in the beginning and 37.4MB in the end (delta: 40.5kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:18,561 INFO L158 Benchmark]: CACSL2BoogieTranslator took 365.66ms. Allocated memory is still 117.4MB. Free memory was 84.5MB in the beginning and 83.2MB in the end (delta: 1.3MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,561 INFO L158 Benchmark]: Boogie Procedure Inliner took 37.63ms. Allocated memory is still 117.4MB. Free memory was 83.2MB in the beginning and 80.3MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,562 INFO L158 Benchmark]: Boogie Preprocessor took 29.64ms. Allocated memory is still 117.4MB. Free memory was 80.3MB in the beginning and 79.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:18,562 INFO L158 Benchmark]: RCFGBuilder took 428.31ms. Allocated memory is still 117.4MB. Free memory was 79.1MB in the beginning and 60.0MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,562 INFO L158 Benchmark]: TraceAbstraction took 21536.80ms. Allocated memory was 117.4MB in the beginning and 249.6MB in the end (delta: 132.1MB). Free memory was 59.4MB in the beginning and 136.8MB in the end (delta: -77.5MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,562 INFO L158 Benchmark]: Witness Printer took 63.18ms. Allocated memory is still 249.6MB. Free memory was 136.8MB in the beginning and 131.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:18,563 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 81.8MB. Free memory was 37.4MB in the beginning and 37.4MB in the end (delta: 40.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 365.66ms. Allocated memory is still 117.4MB. Free memory was 84.5MB in the beginning and 83.2MB in the end (delta: 1.3MB). Peak memory consumption was 10.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 37.63ms. Allocated memory is still 117.4MB. Free memory was 83.2MB in the beginning and 80.3MB in the end (delta: 2.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.64ms. Allocated memory is still 117.4MB. Free memory was 80.3MB in the beginning and 79.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 428.31ms. Allocated memory is still 117.4MB. Free memory was 79.1MB in the beginning and 60.0MB in the end (delta: 19.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 21536.80ms. Allocated memory was 117.4MB in the beginning and 249.6MB in the end (delta: 132.1MB). Free memory was 59.4MB in the beginning and 136.8MB in the end (delta: -77.5MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. * Witness Printer took 63.18ms. Allocated memory is still 249.6MB. Free memory was 136.8MB in the beginning and 131.6MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 92]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 21.4s, OverallIterations: 11, TraceHistogramMax: 6, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 8.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1487 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1458 mSDsluCounter, 4771 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3523 mSDsCounter, 404 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1725 IncrementalHoareTripleChecker+Invalid, 2129 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 404 mSolverCounterUnsat, 1248 mSDtfsCounter, 1725 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 743 GetRequests, 615 SyntacticMatches, 6 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 845 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=771occurred in iteration=8, InterpolantAutomatonStates: 109, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 11 MinimizatonAttempts, 244 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 1570 PreInvPairs, 1815 NumberOfFragments, 2374 HoareAnnotationTreeSize, 1570 FomulaSimplifications, 6384 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 39 FomulaSimplificationsInter, 16213 FormulaSimplificationTreeSizeReductionInter, 4.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 4.0s InterpolantComputationTime, 939 NumberOfCodeBlocks, 939 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1185 ConstructedInterpolants, 0 QuantifiedInterpolants, 2573 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1144 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 858/961 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((1 <= pumpRunning && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (((tmp == 0 && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 245]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && tmp___0 == 0) && \result == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && 2 == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 148]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 737]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((tmp == 0 && pumpRunning == 0) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && 2 == \result) && tmp == 2) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 279]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 727]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 181]: Loop Invariant Derived loop invariant: ((((!(switchedOnBeforeTS == 0) && pumpRunning == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || ((((pumpRunning == 0 && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) - InvariantResult [Line: 800]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 834]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) - InvariantResult [Line: 953]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\result == 1 && pumpRunning == 0) && \old(waterLevel) == waterLevel)) || ((pumpRunning == 0 && 2 == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 88]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:12:18,603 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE