./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:55,592 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:55,595 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:55,637 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:55,637 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:55,641 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:55,642 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:55,645 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:55,647 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:55,651 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:55,652 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:55,653 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:55,654 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:55,656 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:55,657 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:55,660 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:55,661 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:55,661 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:55,664 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:55,669 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:55,670 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:55,671 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:55,673 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:55,674 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:55,680 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:55,680 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:55,680 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:55,682 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:55,682 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:55,683 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:55,684 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:55,684 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:55,686 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:55,687 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:55,688 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:55,689 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:55,689 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:55,690 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:55,690 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:55,691 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:55,692 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:55,693 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:11:55,723 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:55,724 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:55,725 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:55,725 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:55,726 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:55,726 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:55,726 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:55,727 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:55,727 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:55,727 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:55,728 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:55,728 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:11:55,728 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:55,728 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:55,729 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:55,729 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:55,729 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:55,729 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:55,729 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:55,730 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:55,730 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:55,730 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:55,730 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:55,730 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:55,731 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:55,731 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:55,731 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:55,731 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:55,732 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:11:55,732 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:11:55,732 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:55,732 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:55,733 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:55,733 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3ab30b3db91b0e47e6f9b2ed9ba465facc49148e5cdc1cad78e4808ba0c7de84 [2022-02-20 18:11:56,004 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:56,032 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:56,035 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:56,036 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:56,036 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:56,038 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2022-02-20 18:11:56,115 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4bd804dee/eee48e88875744249ed7bc1181ec8d60/FLAG900cc26f2 [2022-02-20 18:11:56,568 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:56,571 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c [2022-02-20 18:11:56,583 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4bd804dee/eee48e88875744249ed7bc1181ec8d60/FLAG900cc26f2 [2022-02-20 18:11:57,067 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4bd804dee/eee48e88875744249ed7bc1181ec8d60 [2022-02-20 18:11:57,069 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:57,070 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:57,072 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:57,072 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:57,079 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:57,080 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,081 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a3480fd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57, skipping insertion in model container [2022-02-20 18:11:57,082 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,088 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:57,142 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:57,346 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2022-02-20 18:11:57,461 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:57,469 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:57,490 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product37.cil.c[5071,5084] [2022-02-20 18:11:57,566 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:57,591 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:57,591 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57 WrapperNode [2022-02-20 18:11:57,592 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:57,593 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:57,593 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:57,593 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:57,599 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,623 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,661 INFO L137 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 256 [2022-02-20 18:11:57,662 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:57,663 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:57,663 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:57,663 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:57,671 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,671 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,679 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,680 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,695 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,703 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,704 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,707 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:57,707 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:57,708 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:57,708 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:57,709 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,719 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:57,728 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:57,744 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:57,760 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:57,784 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:57,784 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:11:57,784 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:11:57,785 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:57,785 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:57,785 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:57,785 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:57,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:57,789 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:57,789 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:57,789 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:57,789 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:11:57,790 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:11:57,790 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:11:57,790 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:57,790 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:57,790 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:57,790 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:57,867 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:57,869 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:58,244 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:58,252 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:58,252 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:58,254 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58 BoogieIcfgContainer [2022-02-20 18:11:58,254 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:58,256 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:58,256 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:58,259 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:58,259 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:57" (1/3) ... [2022-02-20 18:11:58,260 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44127de4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:58, skipping insertion in model container [2022-02-20 18:11:58,260 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57" (2/3) ... [2022-02-20 18:11:58,261 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44127de4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:58, skipping insertion in model container [2022-02-20 18:11:58,261 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58" (3/3) ... [2022-02-20 18:11:58,262 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product37.cil.c [2022-02-20 18:11:58,267 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:58,267 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:58,315 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:58,321 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:58,322 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:58,345 INFO L276 IsEmpty]: Start isEmpty. Operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-02-20 18:11:58,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:11:58,353 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:58,353 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:58,354 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:58,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:58,358 INFO L85 PathProgramCache]: Analyzing trace with hash 1723855951, now seen corresponding path program 1 times [2022-02-20 18:11:58,365 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:58,366 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355537836] [2022-02-20 18:11:58,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:58,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:58,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:58,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,697 INFO L290 TraceCheckUtils]: 0: Hoare triple {93#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {93#true} is VALID [2022-02-20 18:11:58,698 INFO L290 TraceCheckUtils]: 1: Hoare triple {93#true} assume true; {93#true} is VALID [2022-02-20 18:11:58,699 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93#true} {94#false} #232#return; {94#false} is VALID [2022-02-20 18:11:58,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:11:58,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:58,717 INFO L290 TraceCheckUtils]: 0: Hoare triple {93#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {93#true} is VALID [2022-02-20 18:11:58,718 INFO L290 TraceCheckUtils]: 1: Hoare triple {93#true} assume true; {93#true} is VALID [2022-02-20 18:11:58,718 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {93#true} {94#false} #238#return; {94#false} is VALID [2022-02-20 18:11:58,723 INFO L290 TraceCheckUtils]: 0: Hoare triple {93#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {93#true} is VALID [2022-02-20 18:11:58,723 INFO L290 TraceCheckUtils]: 1: Hoare triple {93#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {93#true} is VALID [2022-02-20 18:11:58,723 INFO L290 TraceCheckUtils]: 2: Hoare triple {93#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {93#true} is VALID [2022-02-20 18:11:58,724 INFO L290 TraceCheckUtils]: 3: Hoare triple {93#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {93#true} is VALID [2022-02-20 18:11:58,724 INFO L290 TraceCheckUtils]: 4: Hoare triple {93#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {93#true} is VALID [2022-02-20 18:11:58,724 INFO L290 TraceCheckUtils]: 5: Hoare triple {93#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {93#true} is VALID [2022-02-20 18:11:58,724 INFO L290 TraceCheckUtils]: 6: Hoare triple {93#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {93#true} is VALID [2022-02-20 18:11:58,725 INFO L290 TraceCheckUtils]: 7: Hoare triple {93#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {93#true} is VALID [2022-02-20 18:11:58,726 INFO L290 TraceCheckUtils]: 8: Hoare triple {93#true} assume false; {94#false} is VALID [2022-02-20 18:11:58,726 INFO L272 TraceCheckUtils]: 9: Hoare triple {94#false} call cleanup(); {94#false} is VALID [2022-02-20 18:11:58,726 INFO L290 TraceCheckUtils]: 10: Hoare triple {94#false} havoc ~i~0;havoc ~__cil_tmp2~0; {94#false} is VALID [2022-02-20 18:11:58,726 INFO L272 TraceCheckUtils]: 11: Hoare triple {94#false} call timeShift(); {94#false} is VALID [2022-02-20 18:11:58,728 INFO L290 TraceCheckUtils]: 12: Hoare triple {94#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {94#false} is VALID [2022-02-20 18:11:58,728 INFO L272 TraceCheckUtils]: 13: Hoare triple {94#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {93#true} is VALID [2022-02-20 18:11:58,729 INFO L290 TraceCheckUtils]: 14: Hoare triple {93#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {93#true} is VALID [2022-02-20 18:11:58,729 INFO L290 TraceCheckUtils]: 15: Hoare triple {93#true} assume true; {93#true} is VALID [2022-02-20 18:11:58,729 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {93#true} {94#false} #232#return; {94#false} is VALID [2022-02-20 18:11:58,729 INFO L290 TraceCheckUtils]: 17: Hoare triple {94#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {94#false} is VALID [2022-02-20 18:11:58,730 INFO L290 TraceCheckUtils]: 18: Hoare triple {94#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {94#false} is VALID [2022-02-20 18:11:58,730 INFO L290 TraceCheckUtils]: 19: Hoare triple {94#false} assume !(0 != ~pumpRunning~0); {94#false} is VALID [2022-02-20 18:11:58,730 INFO L290 TraceCheckUtils]: 20: Hoare triple {94#false} assume !(0 != ~systemActive~0); {94#false} is VALID [2022-02-20 18:11:58,730 INFO L290 TraceCheckUtils]: 21: Hoare triple {94#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {94#false} is VALID [2022-02-20 18:11:58,730 INFO L290 TraceCheckUtils]: 22: Hoare triple {94#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {94#false} is VALID [2022-02-20 18:11:58,731 INFO L290 TraceCheckUtils]: 23: Hoare triple {94#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {94#false} is VALID [2022-02-20 18:11:58,731 INFO L272 TraceCheckUtils]: 24: Hoare triple {94#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {93#true} is VALID [2022-02-20 18:11:58,731 INFO L290 TraceCheckUtils]: 25: Hoare triple {93#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {93#true} is VALID [2022-02-20 18:11:58,731 INFO L290 TraceCheckUtils]: 26: Hoare triple {93#true} assume true; {93#true} is VALID [2022-02-20 18:11:58,731 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {93#true} {94#false} #238#return; {94#false} is VALID [2022-02-20 18:11:58,732 INFO L290 TraceCheckUtils]: 28: Hoare triple {94#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {94#false} is VALID [2022-02-20 18:11:58,732 INFO L290 TraceCheckUtils]: 29: Hoare triple {94#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {94#false} is VALID [2022-02-20 18:11:58,732 INFO L290 TraceCheckUtils]: 30: Hoare triple {94#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {94#false} is VALID [2022-02-20 18:11:58,732 INFO L290 TraceCheckUtils]: 31: Hoare triple {94#false} assume !false; {94#false} is VALID [2022-02-20 18:11:58,733 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:58,733 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:58,733 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355537836] [2022-02-20 18:11:58,734 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355537836] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:58,734 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:58,734 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:58,736 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735836135] [2022-02-20 18:11:58,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:58,743 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:58,745 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:58,749 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,803 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:58,804 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:58,804 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:58,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:58,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:58,837 INFO L87 Difference]: Start difference. First operand has 90 states, 69 states have (on average 1.3768115942028984) internal successors, (95), 77 states have internal predecessors, (95), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:58,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:58,994 INFO L93 Difference]: Finished difference Result 171 states and 232 transitions. [2022-02-20 18:11:58,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:58,995 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:58,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:58,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 232 transitions. [2022-02-20 18:11:59,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 232 transitions. [2022-02-20 18:11:59,038 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 232 transitions. [2022-02-20 18:11:59,268 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,288 INFO L225 Difference]: With dead ends: 171 [2022-02-20 18:11:59,288 INFO L226 Difference]: Without dead ends: 81 [2022-02-20 18:11:59,292 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:59,296 INFO L933 BasicCegarLoop]: 113 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,299 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-02-20 18:11:59,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-02-20 18:11:59,346 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,348 INFO L82 GeneralOperation]: Start isEquivalent. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,352 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,353 INFO L87 Difference]: Start difference. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,368 INFO L93 Difference]: Finished difference Result 81 states and 104 transitions. [2022-02-20 18:11:59,369 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-02-20 18:11:59,371 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,371 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,372 INFO L74 IsIncluded]: Start isIncluded. First operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 81 states. [2022-02-20 18:11:59,373 INFO L87 Difference]: Start difference. First operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 81 states. [2022-02-20 18:11:59,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,379 INFO L93 Difference]: Finished difference Result 81 states and 104 transitions. [2022-02-20 18:11:59,379 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-02-20 18:11:59,380 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,380 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,380 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,381 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.3064516129032258) internal successors, (81), 69 states have internal predecessors, (81), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 104 transitions. [2022-02-20 18:11:59,387 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 104 transitions. Word has length 32 [2022-02-20 18:11:59,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,388 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 104 transitions. [2022-02-20 18:11:59,388 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,388 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 104 transitions. [2022-02-20 18:11:59,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-02-20 18:11:59,390 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,390 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,391 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:11:59,391 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,392 INFO L85 PathProgramCache]: Analyzing trace with hash 1706700211, now seen corresponding path program 1 times [2022-02-20 18:11:59,392 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,393 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631242063] [2022-02-20 18:11:59,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,393 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:59,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:11:59,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,526 INFO L290 TraceCheckUtils]: 0: Hoare triple {632#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {632#true} is VALID [2022-02-20 18:11:59,526 INFO L290 TraceCheckUtils]: 1: Hoare triple {632#true} assume true; {632#true} is VALID [2022-02-20 18:11:59,527 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {632#true} {634#(= 1 ~systemActive~0)} #232#return; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:11:59,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,536 INFO L290 TraceCheckUtils]: 0: Hoare triple {632#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {632#true} is VALID [2022-02-20 18:11:59,536 INFO L290 TraceCheckUtils]: 1: Hoare triple {632#true} assume true; {632#true} is VALID [2022-02-20 18:11:59,537 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {632#true} {633#false} #238#return; {633#false} is VALID [2022-02-20 18:11:59,542 INFO L290 TraceCheckUtils]: 0: Hoare triple {632#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,542 INFO L290 TraceCheckUtils]: 1: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,543 INFO L290 TraceCheckUtils]: 2: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,545 INFO L290 TraceCheckUtils]: 3: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,548 INFO L290 TraceCheckUtils]: 4: Hoare triple {634#(= 1 ~systemActive~0)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,551 INFO L290 TraceCheckUtils]: 5: Hoare triple {634#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,552 INFO L290 TraceCheckUtils]: 6: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,552 INFO L290 TraceCheckUtils]: 7: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,553 INFO L290 TraceCheckUtils]: 8: Hoare triple {634#(= 1 ~systemActive~0)} assume !false; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,553 INFO L290 TraceCheckUtils]: 9: Hoare triple {634#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,554 INFO L290 TraceCheckUtils]: 10: Hoare triple {634#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,555 INFO L290 TraceCheckUtils]: 11: Hoare triple {634#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5#1); {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,556 INFO L290 TraceCheckUtils]: 12: Hoare triple {634#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,556 INFO L290 TraceCheckUtils]: 13: Hoare triple {634#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,557 INFO L290 TraceCheckUtils]: 14: Hoare triple {634#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,558 INFO L290 TraceCheckUtils]: 15: Hoare triple {634#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,558 INFO L272 TraceCheckUtils]: 16: Hoare triple {634#(= 1 ~systemActive~0)} call timeShift(); {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,559 INFO L290 TraceCheckUtils]: 17: Hoare triple {634#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,559 INFO L272 TraceCheckUtils]: 18: Hoare triple {634#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {632#true} is VALID [2022-02-20 18:11:59,559 INFO L290 TraceCheckUtils]: 19: Hoare triple {632#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {632#true} is VALID [2022-02-20 18:11:59,560 INFO L290 TraceCheckUtils]: 20: Hoare triple {632#true} assume true; {632#true} is VALID [2022-02-20 18:11:59,561 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {632#true} {634#(= 1 ~systemActive~0)} #232#return; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,561 INFO L290 TraceCheckUtils]: 22: Hoare triple {634#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,562 INFO L290 TraceCheckUtils]: 23: Hoare triple {634#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,563 INFO L290 TraceCheckUtils]: 24: Hoare triple {634#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {634#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:11:59,563 INFO L290 TraceCheckUtils]: 25: Hoare triple {634#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {633#false} is VALID [2022-02-20 18:11:59,564 INFO L290 TraceCheckUtils]: 26: Hoare triple {633#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {633#false} is VALID [2022-02-20 18:11:59,564 INFO L290 TraceCheckUtils]: 27: Hoare triple {633#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {633#false} is VALID [2022-02-20 18:11:59,564 INFO L290 TraceCheckUtils]: 28: Hoare triple {633#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {633#false} is VALID [2022-02-20 18:11:59,564 INFO L272 TraceCheckUtils]: 29: Hoare triple {633#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {632#true} is VALID [2022-02-20 18:11:59,565 INFO L290 TraceCheckUtils]: 30: Hoare triple {632#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {632#true} is VALID [2022-02-20 18:11:59,565 INFO L290 TraceCheckUtils]: 31: Hoare triple {632#true} assume true; {632#true} is VALID [2022-02-20 18:11:59,565 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {632#true} {633#false} #238#return; {633#false} is VALID [2022-02-20 18:11:59,566 INFO L290 TraceCheckUtils]: 33: Hoare triple {633#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {633#false} is VALID [2022-02-20 18:11:59,566 INFO L290 TraceCheckUtils]: 34: Hoare triple {633#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {633#false} is VALID [2022-02-20 18:11:59,566 INFO L290 TraceCheckUtils]: 35: Hoare triple {633#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {633#false} is VALID [2022-02-20 18:11:59,566 INFO L290 TraceCheckUtils]: 36: Hoare triple {633#false} assume !false; {633#false} is VALID [2022-02-20 18:11:59,567 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:59,567 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:59,568 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631242063] [2022-02-20 18:11:59,568 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631242063] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:59,568 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:59,568 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:59,569 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1781632772] [2022-02-20 18:11:59,569 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:59,570 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:11:59,571 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:59,572 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,602 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,603 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:59,603 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:59,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:59,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:59,605 INFO L87 Difference]: Start difference. First operand 81 states and 104 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,730 INFO L93 Difference]: Finished difference Result 154 states and 203 transitions. [2022-02-20 18:11:59,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:59,731 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:11:59,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:59,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 203 transitions. [2022-02-20 18:11:59,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 203 transitions. [2022-02-20 18:11:59,739 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 203 transitions. [2022-02-20 18:11:59,928 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 203 edges. 203 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,933 INFO L225 Difference]: With dead ends: 154 [2022-02-20 18:11:59,933 INFO L226 Difference]: Without dead ends: 81 [2022-02-20 18:11:59,940 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:59,942 INFO L933 BasicCegarLoop]: 102 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,943 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 102 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-02-20 18:11:59,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 81. [2022-02-20 18:11:59,959 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,959 INFO L82 GeneralOperation]: Start isEquivalent. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,960 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,960 INFO L87 Difference]: Start difference. First operand 81 states. Second operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,965 INFO L93 Difference]: Finished difference Result 81 states and 103 transitions. [2022-02-20 18:11:59,967 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-02-20 18:11:59,969 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,970 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,970 INFO L74 IsIncluded]: Start isIncluded. First operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 81 states. [2022-02-20 18:11:59,971 INFO L87 Difference]: Start difference. First operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand 81 states. [2022-02-20 18:11:59,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,975 INFO L93 Difference]: Finished difference Result 81 states and 103 transitions. [2022-02-20 18:11:59,975 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-02-20 18:11:59,976 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,976 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,976 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,976 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 62 states have (on average 1.2903225806451613) internal successors, (80), 69 states have internal predecessors, (80), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:11:59,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 103 transitions. [2022-02-20 18:11:59,981 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 103 transitions. Word has length 37 [2022-02-20 18:11:59,981 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,982 INFO L470 AbstractCegarLoop]: Abstraction has 81 states and 103 transitions. [2022-02-20 18:11:59,983 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:11:59,983 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 103 transitions. [2022-02-20 18:11:59,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:11:59,986 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,986 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:11:59,987 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,988 INFO L85 PathProgramCache]: Analyzing trace with hash -1169521560, now seen corresponding path program 1 times [2022-02-20 18:11:59,988 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,988 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1808134475] [2022-02-20 18:11:59,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:00,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:00,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,100 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:12:00,101 INFO L290 TraceCheckUtils]: 1: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,101 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1146#true} {1148#(= ~pumpRunning~0 0)} #232#return; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:00,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:00,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,123 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,123 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {1146#true} {1163#(not (= |old(~pumpRunning~0)| 0))} #254#return; {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,124 INFO L290 TraceCheckUtils]: 0: Hoare triple {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:00,125 INFO L290 TraceCheckUtils]: 1: Hoare triple {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,125 INFO L272 TraceCheckUtils]: 2: Hoare triple {1163#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1146#true} is VALID [2022-02-20 18:12:00,125 INFO L290 TraceCheckUtils]: 3: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,126 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {1146#true} {1163#(not (= |old(~pumpRunning~0)| 0))} #254#return; {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,126 INFO L290 TraceCheckUtils]: 5: Hoare triple {1163#(not (= |old(~pumpRunning~0)| 0))} assume true; {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,127 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {1163#(not (= |old(~pumpRunning~0)| 0))} {1148#(= ~pumpRunning~0 0)} #236#return; {1147#false} is VALID [2022-02-20 18:12:00,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:12:00,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,134 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:12:00,134 INFO L290 TraceCheckUtils]: 1: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,135 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1146#true} {1147#false} #238#return; {1147#false} is VALID [2022-02-20 18:12:00,135 INFO L290 TraceCheckUtils]: 0: Hoare triple {1146#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,139 INFO L290 TraceCheckUtils]: 1: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,140 INFO L290 TraceCheckUtils]: 2: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,140 INFO L290 TraceCheckUtils]: 3: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,141 INFO L290 TraceCheckUtils]: 4: Hoare triple {1148#(= ~pumpRunning~0 0)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,141 INFO L290 TraceCheckUtils]: 5: Hoare triple {1148#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,143 INFO L290 TraceCheckUtils]: 6: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,144 INFO L290 TraceCheckUtils]: 7: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,144 INFO L290 TraceCheckUtils]: 8: Hoare triple {1148#(= ~pumpRunning~0 0)} assume !false; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,145 INFO L290 TraceCheckUtils]: 9: Hoare triple {1148#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,145 INFO L290 TraceCheckUtils]: 10: Hoare triple {1148#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,146 INFO L290 TraceCheckUtils]: 11: Hoare triple {1148#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,146 INFO L290 TraceCheckUtils]: 12: Hoare triple {1148#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,147 INFO L290 TraceCheckUtils]: 13: Hoare triple {1148#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,148 INFO L290 TraceCheckUtils]: 14: Hoare triple {1148#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,148 INFO L290 TraceCheckUtils]: 15: Hoare triple {1148#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,149 INFO L272 TraceCheckUtils]: 16: Hoare triple {1148#(= ~pumpRunning~0 0)} call timeShift(); {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,150 INFO L290 TraceCheckUtils]: 17: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,150 INFO L272 TraceCheckUtils]: 18: Hoare triple {1148#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {1146#true} is VALID [2022-02-20 18:12:00,150 INFO L290 TraceCheckUtils]: 19: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:12:00,150 INFO L290 TraceCheckUtils]: 20: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,161 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1146#true} {1148#(= ~pumpRunning~0 0)} #232#return; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,162 INFO L290 TraceCheckUtils]: 22: Hoare triple {1148#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,162 INFO L290 TraceCheckUtils]: 23: Hoare triple {1148#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,163 INFO L290 TraceCheckUtils]: 24: Hoare triple {1148#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,163 INFO L290 TraceCheckUtils]: 25: Hoare triple {1148#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,164 INFO L290 TraceCheckUtils]: 26: Hoare triple {1148#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {1148#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,164 INFO L272 TraceCheckUtils]: 27: Hoare triple {1148#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:00,165 INFO L290 TraceCheckUtils]: 28: Hoare triple {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:00,165 INFO L290 TraceCheckUtils]: 29: Hoare triple {1162#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} assume !(0 == ~pumpRunning~0); {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,165 INFO L272 TraceCheckUtils]: 30: Hoare triple {1163#(not (= |old(~pumpRunning~0)| 0))} call processEnvironment__wrappee__base(); {1146#true} is VALID [2022-02-20 18:12:00,165 INFO L290 TraceCheckUtils]: 31: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,166 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {1146#true} {1163#(not (= |old(~pumpRunning~0)| 0))} #254#return; {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,166 INFO L290 TraceCheckUtils]: 33: Hoare triple {1163#(not (= |old(~pumpRunning~0)| 0))} assume true; {1163#(not (= |old(~pumpRunning~0)| 0))} is VALID [2022-02-20 18:12:00,167 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {1163#(not (= |old(~pumpRunning~0)| 0))} {1148#(= ~pumpRunning~0 0)} #236#return; {1147#false} is VALID [2022-02-20 18:12:00,167 INFO L290 TraceCheckUtils]: 35: Hoare triple {1147#false} assume { :end_inline_processEnvironment } true; {1147#false} is VALID [2022-02-20 18:12:00,167 INFO L290 TraceCheckUtils]: 36: Hoare triple {1147#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {1147#false} is VALID [2022-02-20 18:12:00,167 INFO L290 TraceCheckUtils]: 37: Hoare triple {1147#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {1147#false} is VALID [2022-02-20 18:12:00,168 INFO L290 TraceCheckUtils]: 38: Hoare triple {1147#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {1147#false} is VALID [2022-02-20 18:12:00,168 INFO L272 TraceCheckUtils]: 39: Hoare triple {1147#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {1146#true} is VALID [2022-02-20 18:12:00,168 INFO L290 TraceCheckUtils]: 40: Hoare triple {1146#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {1146#true} is VALID [2022-02-20 18:12:00,168 INFO L290 TraceCheckUtils]: 41: Hoare triple {1146#true} assume true; {1146#true} is VALID [2022-02-20 18:12:00,168 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {1146#true} {1147#false} #238#return; {1147#false} is VALID [2022-02-20 18:12:00,168 INFO L290 TraceCheckUtils]: 43: Hoare triple {1147#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {1147#false} is VALID [2022-02-20 18:12:00,168 INFO L290 TraceCheckUtils]: 44: Hoare triple {1147#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {1147#false} is VALID [2022-02-20 18:12:00,169 INFO L290 TraceCheckUtils]: 45: Hoare triple {1147#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1147#false} is VALID [2022-02-20 18:12:00,169 INFO L290 TraceCheckUtils]: 46: Hoare triple {1147#false} assume !false; {1147#false} is VALID [2022-02-20 18:12:00,169 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:00,169 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:00,169 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1808134475] [2022-02-20 18:12:00,170 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1808134475] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:00,170 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:00,170 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:00,170 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [939822178] [2022-02-20 18:12:00,170 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:00,171 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-02-20 18:12:00,171 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:00,172 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:00,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,213 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:00,213 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:00,214 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:00,214 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:00,214 INFO L87 Difference]: Start difference. First operand 81 states and 103 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:00,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,905 INFO L93 Difference]: Finished difference Result 268 states and 364 transitions. [2022-02-20 18:12:00,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:12:00,906 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 47 [2022-02-20 18:12:00,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:00,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:00,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 364 transitions. [2022-02-20 18:12:00,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:00,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 364 transitions. [2022-02-20 18:12:00,921 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 364 transitions. [2022-02-20 18:12:01,237 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 364 edges. 364 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,246 INFO L225 Difference]: With dead ends: 268 [2022-02-20 18:12:01,247 INFO L226 Difference]: Without dead ends: 195 [2022-02-20 18:12:01,248 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-20 18:12:01,254 INFO L933 BasicCegarLoop]: 171 mSDtfsCounter, 210 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 402 SdHoareTripleChecker+Invalid, 217 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:01,258 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [215 Valid, 402 Invalid, 217 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:01,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2022-02-20 18:12:01,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 173. [2022-02-20 18:12:01,281 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:01,282 INFO L82 GeneralOperation]: Start isEquivalent. First operand 195 states. Second operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:01,283 INFO L74 IsIncluded]: Start isIncluded. First operand 195 states. Second operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:01,283 INFO L87 Difference]: Start difference. First operand 195 states. Second operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:01,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,293 INFO L93 Difference]: Finished difference Result 195 states and 251 transitions. [2022-02-20 18:12:01,293 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 251 transitions. [2022-02-20 18:12:01,294 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,294 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,295 INFO L74 IsIncluded]: Start isIncluded. First operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) Second operand 195 states. [2022-02-20 18:12:01,296 INFO L87 Difference]: Start difference. First operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) Second operand 195 states. [2022-02-20 18:12:01,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,306 INFO L93 Difference]: Finished difference Result 195 states and 251 transitions. [2022-02-20 18:12:01,306 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 251 transitions. [2022-02-20 18:12:01,307 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,307 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,307 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:01,308 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:01,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 173 states, 132 states have (on average 1.2424242424242424) internal successors, (164), 137 states have internal predecessors, (164), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:01,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 224 transitions. [2022-02-20 18:12:01,316 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 224 transitions. Word has length 47 [2022-02-20 18:12:01,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:01,317 INFO L470 AbstractCegarLoop]: Abstraction has 173 states and 224 transitions. [2022-02-20 18:12:01,317 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:01,317 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 224 transitions. [2022-02-20 18:12:01,318 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:01,318 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:01,318 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:01,318 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:12:01,319 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:01,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:01,319 INFO L85 PathProgramCache]: Analyzing trace with hash -870205615, now seen corresponding path program 1 times [2022-02-20 18:12:01,319 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:01,319 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [266277410] [2022-02-20 18:12:01,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:01,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:01,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:01,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,371 INFO L290 TraceCheckUtils]: 0: Hoare triple {2189#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {2189#true} is VALID [2022-02-20 18:12:01,371 INFO L290 TraceCheckUtils]: 1: Hoare triple {2189#true} assume true; {2189#true} is VALID [2022-02-20 18:12:01,371 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2189#true} {2189#true} #232#return; {2189#true} is VALID [2022-02-20 18:12:01,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:01,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,404 INFO L290 TraceCheckUtils]: 0: Hoare triple {2208#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {2189#true} is VALID [2022-02-20 18:12:01,404 INFO L290 TraceCheckUtils]: 1: Hoare triple {2189#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {2189#true} is VALID [2022-02-20 18:12:01,404 INFO L290 TraceCheckUtils]: 2: Hoare triple {2189#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {2189#true} is VALID [2022-02-20 18:12:01,404 INFO L290 TraceCheckUtils]: 3: Hoare triple {2189#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {2189#true} is VALID [2022-02-20 18:12:01,405 INFO L290 TraceCheckUtils]: 4: Hoare triple {2189#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2209#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:12:01,405 INFO L290 TraceCheckUtils]: 5: Hoare triple {2209#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {2210#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:01,406 INFO L290 TraceCheckUtils]: 6: Hoare triple {2210#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {2211#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:12:01,406 INFO L290 TraceCheckUtils]: 7: Hoare triple {2211#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2190#false} is VALID [2022-02-20 18:12:01,407 INFO L290 TraceCheckUtils]: 8: Hoare triple {2190#false} assume { :end_inline_activatePump } true; {2190#false} is VALID [2022-02-20 18:12:01,407 INFO L290 TraceCheckUtils]: 9: Hoare triple {2190#false} assume true; {2190#false} is VALID [2022-02-20 18:12:01,407 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {2190#false} {2189#true} #236#return; {2190#false} is VALID [2022-02-20 18:12:01,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:01,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,412 INFO L290 TraceCheckUtils]: 0: Hoare triple {2189#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {2189#true} is VALID [2022-02-20 18:12:01,412 INFO L290 TraceCheckUtils]: 1: Hoare triple {2189#true} assume true; {2189#true} is VALID [2022-02-20 18:12:01,412 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2189#true} {2190#false} #238#return; {2190#false} is VALID [2022-02-20 18:12:01,412 INFO L290 TraceCheckUtils]: 0: Hoare triple {2189#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 1: Hoare triple {2189#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 2: Hoare triple {2189#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 3: Hoare triple {2189#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 4: Hoare triple {2189#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 5: Hoare triple {2189#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 6: Hoare triple {2189#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2189#true} is VALID [2022-02-20 18:12:01,413 INFO L290 TraceCheckUtils]: 7: Hoare triple {2189#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 8: Hoare triple {2189#true} assume !false; {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 9: Hoare triple {2189#true} assume test_~splverifierCounter~0#1 < 4; {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 10: Hoare triple {2189#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 11: Hoare triple {2189#true} assume !(0 != test_~tmp~5#1); {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 12: Hoare triple {2189#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {2189#true} is VALID [2022-02-20 18:12:01,414 INFO L290 TraceCheckUtils]: 13: Hoare triple {2189#true} assume !(0 != test_~tmp___0~2#1); {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L290 TraceCheckUtils]: 14: Hoare triple {2189#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L290 TraceCheckUtils]: 15: Hoare triple {2189#true} assume 0 != test_~tmp___2~0#1; {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L272 TraceCheckUtils]: 16: Hoare triple {2189#true} call timeShift(); {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L290 TraceCheckUtils]: 17: Hoare triple {2189#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L272 TraceCheckUtils]: 18: Hoare triple {2189#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L290 TraceCheckUtils]: 19: Hoare triple {2189#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {2189#true} is VALID [2022-02-20 18:12:01,415 INFO L290 TraceCheckUtils]: 20: Hoare triple {2189#true} assume true; {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {2189#true} {2189#true} #232#return; {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L290 TraceCheckUtils]: 22: Hoare triple {2189#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L290 TraceCheckUtils]: 23: Hoare triple {2189#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L290 TraceCheckUtils]: 24: Hoare triple {2189#true} assume !(0 != ~pumpRunning~0); {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L290 TraceCheckUtils]: 25: Hoare triple {2189#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {2189#true} is VALID [2022-02-20 18:12:01,416 INFO L290 TraceCheckUtils]: 26: Hoare triple {2189#true} assume !(0 != ~pumpRunning~0); {2189#true} is VALID [2022-02-20 18:12:01,417 INFO L272 TraceCheckUtils]: 27: Hoare triple {2189#true} call processEnvironment__wrappee__highWaterSensor(); {2208#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:01,417 INFO L290 TraceCheckUtils]: 28: Hoare triple {2208#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {2189#true} is VALID [2022-02-20 18:12:01,417 INFO L290 TraceCheckUtils]: 29: Hoare triple {2189#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {2189#true} is VALID [2022-02-20 18:12:01,417 INFO L290 TraceCheckUtils]: 30: Hoare triple {2189#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {2189#true} is VALID [2022-02-20 18:12:01,418 INFO L290 TraceCheckUtils]: 31: Hoare triple {2189#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {2189#true} is VALID [2022-02-20 18:12:01,418 INFO L290 TraceCheckUtils]: 32: Hoare triple {2189#true} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {2209#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} is VALID [2022-02-20 18:12:01,419 INFO L290 TraceCheckUtils]: 33: Hoare triple {2209#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {2210#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:01,419 INFO L290 TraceCheckUtils]: 34: Hoare triple {2210#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {2211#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} is VALID [2022-02-20 18:12:01,419 INFO L290 TraceCheckUtils]: 35: Hoare triple {2211#(= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {2190#false} is VALID [2022-02-20 18:12:01,420 INFO L290 TraceCheckUtils]: 36: Hoare triple {2190#false} assume { :end_inline_activatePump } true; {2190#false} is VALID [2022-02-20 18:12:01,420 INFO L290 TraceCheckUtils]: 37: Hoare triple {2190#false} assume true; {2190#false} is VALID [2022-02-20 18:12:01,423 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {2190#false} {2189#true} #236#return; {2190#false} is VALID [2022-02-20 18:12:01,424 INFO L290 TraceCheckUtils]: 39: Hoare triple {2190#false} assume { :end_inline_processEnvironment } true; {2190#false} is VALID [2022-02-20 18:12:01,424 INFO L290 TraceCheckUtils]: 40: Hoare triple {2190#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {2190#false} is VALID [2022-02-20 18:12:01,424 INFO L290 TraceCheckUtils]: 41: Hoare triple {2190#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {2190#false} is VALID [2022-02-20 18:12:01,424 INFO L290 TraceCheckUtils]: 42: Hoare triple {2190#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {2190#false} is VALID [2022-02-20 18:12:01,424 INFO L272 TraceCheckUtils]: 43: Hoare triple {2190#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {2189#true} is VALID [2022-02-20 18:12:01,424 INFO L290 TraceCheckUtils]: 44: Hoare triple {2189#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {2189#true} is VALID [2022-02-20 18:12:01,425 INFO L290 TraceCheckUtils]: 45: Hoare triple {2189#true} assume true; {2189#true} is VALID [2022-02-20 18:12:01,425 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {2189#true} {2190#false} #238#return; {2190#false} is VALID [2022-02-20 18:12:01,425 INFO L290 TraceCheckUtils]: 47: Hoare triple {2190#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {2190#false} is VALID [2022-02-20 18:12:01,425 INFO L290 TraceCheckUtils]: 48: Hoare triple {2190#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {2190#false} is VALID [2022-02-20 18:12:01,425 INFO L290 TraceCheckUtils]: 49: Hoare triple {2190#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {2190#false} is VALID [2022-02-20 18:12:01,425 INFO L290 TraceCheckUtils]: 50: Hoare triple {2190#false} assume !false; {2190#false} is VALID [2022-02-20 18:12:01,427 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:01,427 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:01,427 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [266277410] [2022-02-20 18:12:01,428 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [266277410] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:01,428 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:01,428 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:01,428 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838282512] [2022-02-20 18:12:01,428 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:01,429 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:01,429 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:01,430 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,463 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,464 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:01,464 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:01,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:01,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:01,465 INFO L87 Difference]: Start difference. First operand 173 states and 224 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:02,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,012 INFO L93 Difference]: Finished difference Result 352 states and 465 transitions. [2022-02-20 18:12:02,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:02,012 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:02,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:02,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:02,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 240 transitions. [2022-02-20 18:12:02,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:02,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 240 transitions. [2022-02-20 18:12:02,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 240 transitions. [2022-02-20 18:12:02,208 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 240 edges. 240 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,213 INFO L225 Difference]: With dead ends: 352 [2022-02-20 18:12:02,214 INFO L226 Difference]: Without dead ends: 187 [2022-02-20 18:12:02,215 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:02,216 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 67 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 463 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:02,216 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [70 Valid, 463 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:02,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-02-20 18:12:02,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 176. [2022-02-20 18:12:02,229 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:02,230 INFO L82 GeneralOperation]: Start isEquivalent. First operand 187 states. Second operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:02,230 INFO L74 IsIncluded]: Start isIncluded. First operand 187 states. Second operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:02,231 INFO L87 Difference]: Start difference. First operand 187 states. Second operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:02,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,239 INFO L93 Difference]: Finished difference Result 187 states and 240 transitions. [2022-02-20 18:12:02,239 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 240 transitions. [2022-02-20 18:12:02,240 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,241 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,241 INFO L74 IsIncluded]: Start isIncluded. First operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) Second operand 187 states. [2022-02-20 18:12:02,242 INFO L87 Difference]: Start difference. First operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) Second operand 187 states. [2022-02-20 18:12:02,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,250 INFO L93 Difference]: Finished difference Result 187 states and 240 transitions. [2022-02-20 18:12:02,250 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 240 transitions. [2022-02-20 18:12:02,251 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:02,251 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:02,251 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:02,252 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:02,252 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 176 states, 135 states have (on average 1.237037037037037) internal successors, (167), 140 states have internal predecessors, (167), 24 states have call successors, (24), 16 states have call predecessors, (24), 16 states have return successors, (36), 24 states have call predecessors, (36), 22 states have call successors, (36) [2022-02-20 18:12:02,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 176 states to 176 states and 227 transitions. [2022-02-20 18:12:02,260 INFO L78 Accepts]: Start accepts. Automaton has 176 states and 227 transitions. Word has length 51 [2022-02-20 18:12:02,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:02,261 INFO L470 AbstractCegarLoop]: Abstraction has 176 states and 227 transitions. [2022-02-20 18:12:02,261 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:02,261 INFO L276 IsEmpty]: Start isEmpty. Operand 176 states and 227 transitions. [2022-02-20 18:12:02,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-02-20 18:12:02,262 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:02,262 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:02,262 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:12:02,263 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:02,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:02,263 INFO L85 PathProgramCache]: Analyzing trace with hash 1295349339, now seen corresponding path program 1 times [2022-02-20 18:12:02,263 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:02,264 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63464451] [2022-02-20 18:12:02,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:02,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:02,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:12:02,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,306 INFO L290 TraceCheckUtils]: 0: Hoare triple {3340#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {3340#true} is VALID [2022-02-20 18:12:02,306 INFO L290 TraceCheckUtils]: 1: Hoare triple {3340#true} assume true; {3340#true} is VALID [2022-02-20 18:12:02,306 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3340#true} {3341#false} #232#return; {3341#false} is VALID [2022-02-20 18:12:02,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-20 18:12:02,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,346 INFO L290 TraceCheckUtils]: 0: Hoare triple {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {3340#true} is VALID [2022-02-20 18:12:02,346 INFO L290 TraceCheckUtils]: 1: Hoare triple {3340#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {3340#true} is VALID [2022-02-20 18:12:02,347 INFO L290 TraceCheckUtils]: 2: Hoare triple {3340#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {3361#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} is VALID [2022-02-20 18:12:02,347 INFO L290 TraceCheckUtils]: 3: Hoare triple {3361#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {3362#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} is VALID [2022-02-20 18:12:02,348 INFO L290 TraceCheckUtils]: 4: Hoare triple {3362#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {3341#false} is VALID [2022-02-20 18:12:02,348 INFO L290 TraceCheckUtils]: 5: Hoare triple {3341#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {3341#false} is VALID [2022-02-20 18:12:02,348 INFO L290 TraceCheckUtils]: 6: Hoare triple {3341#false} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {3341#false} is VALID [2022-02-20 18:12:02,348 INFO L290 TraceCheckUtils]: 7: Hoare triple {3341#false} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3341#false} is VALID [2022-02-20 18:12:02,348 INFO L290 TraceCheckUtils]: 8: Hoare triple {3341#false} assume { :end_inline_activatePump } true; {3341#false} is VALID [2022-02-20 18:12:02,349 INFO L290 TraceCheckUtils]: 9: Hoare triple {3341#false} assume true; {3341#false} is VALID [2022-02-20 18:12:02,349 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {3341#false} {3341#false} #236#return; {3341#false} is VALID [2022-02-20 18:12:02,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-02-20 18:12:02,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,353 INFO L290 TraceCheckUtils]: 0: Hoare triple {3340#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {3340#true} is VALID [2022-02-20 18:12:02,353 INFO L290 TraceCheckUtils]: 1: Hoare triple {3340#true} assume true; {3340#true} is VALID [2022-02-20 18:12:02,353 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3340#true} {3341#false} #238#return; {3341#false} is VALID [2022-02-20 18:12:02,354 INFO L290 TraceCheckUtils]: 0: Hoare triple {3340#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3340#true} is VALID [2022-02-20 18:12:02,354 INFO L290 TraceCheckUtils]: 1: Hoare triple {3340#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {3340#true} is VALID [2022-02-20 18:12:02,354 INFO L290 TraceCheckUtils]: 2: Hoare triple {3340#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3340#true} is VALID [2022-02-20 18:12:02,354 INFO L290 TraceCheckUtils]: 3: Hoare triple {3340#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {3340#true} is VALID [2022-02-20 18:12:02,355 INFO L290 TraceCheckUtils]: 4: Hoare triple {3340#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {3340#true} is VALID [2022-02-20 18:12:02,355 INFO L290 TraceCheckUtils]: 5: Hoare triple {3340#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {3340#true} is VALID [2022-02-20 18:12:02,355 INFO L290 TraceCheckUtils]: 6: Hoare triple {3340#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {3340#true} is VALID [2022-02-20 18:12:02,355 INFO L290 TraceCheckUtils]: 7: Hoare triple {3340#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3342#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:02,356 INFO L290 TraceCheckUtils]: 8: Hoare triple {3342#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {3342#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:12:02,361 INFO L290 TraceCheckUtils]: 9: Hoare triple {3342#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {3341#false} is VALID [2022-02-20 18:12:02,362 INFO L272 TraceCheckUtils]: 10: Hoare triple {3341#false} call cleanup(); {3341#false} is VALID [2022-02-20 18:12:02,362 INFO L290 TraceCheckUtils]: 11: Hoare triple {3341#false} havoc ~i~0;havoc ~__cil_tmp2~0; {3341#false} is VALID [2022-02-20 18:12:02,362 INFO L272 TraceCheckUtils]: 12: Hoare triple {3341#false} call timeShift(); {3341#false} is VALID [2022-02-20 18:12:02,362 INFO L290 TraceCheckUtils]: 13: Hoare triple {3341#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {3341#false} is VALID [2022-02-20 18:12:02,362 INFO L272 TraceCheckUtils]: 14: Hoare triple {3341#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {3340#true} is VALID [2022-02-20 18:12:02,362 INFO L290 TraceCheckUtils]: 15: Hoare triple {3340#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {3340#true} is VALID [2022-02-20 18:12:02,363 INFO L290 TraceCheckUtils]: 16: Hoare triple {3340#true} assume true; {3340#true} is VALID [2022-02-20 18:12:02,363 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {3340#true} {3341#false} #232#return; {3341#false} is VALID [2022-02-20 18:12:02,363 INFO L290 TraceCheckUtils]: 18: Hoare triple {3341#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {3341#false} is VALID [2022-02-20 18:12:02,363 INFO L290 TraceCheckUtils]: 19: Hoare triple {3341#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {3341#false} is VALID [2022-02-20 18:12:02,363 INFO L290 TraceCheckUtils]: 20: Hoare triple {3341#false} assume !(0 != ~pumpRunning~0); {3341#false} is VALID [2022-02-20 18:12:02,364 INFO L290 TraceCheckUtils]: 21: Hoare triple {3341#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {3341#false} is VALID [2022-02-20 18:12:02,364 INFO L290 TraceCheckUtils]: 22: Hoare triple {3341#false} assume !(0 != ~pumpRunning~0); {3341#false} is VALID [2022-02-20 18:12:02,364 INFO L272 TraceCheckUtils]: 23: Hoare triple {3341#false} call processEnvironment__wrappee__highWaterSensor(); {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:02,364 INFO L290 TraceCheckUtils]: 24: Hoare triple {3360#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {3340#true} is VALID [2022-02-20 18:12:02,364 INFO L290 TraceCheckUtils]: 25: Hoare triple {3340#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {3340#true} is VALID [2022-02-20 18:12:02,365 INFO L290 TraceCheckUtils]: 26: Hoare triple {3340#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {3361#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} is VALID [2022-02-20 18:12:02,366 INFO L290 TraceCheckUtils]: 27: Hoare triple {3361#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {3362#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} is VALID [2022-02-20 18:12:02,366 INFO L290 TraceCheckUtils]: 28: Hoare triple {3362#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {3341#false} is VALID [2022-02-20 18:12:02,366 INFO L290 TraceCheckUtils]: 29: Hoare triple {3341#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {3341#false} is VALID [2022-02-20 18:12:02,366 INFO L290 TraceCheckUtils]: 30: Hoare triple {3341#false} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {3341#false} is VALID [2022-02-20 18:12:02,366 INFO L290 TraceCheckUtils]: 31: Hoare triple {3341#false} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3341#false} is VALID [2022-02-20 18:12:02,367 INFO L290 TraceCheckUtils]: 32: Hoare triple {3341#false} assume { :end_inline_activatePump } true; {3341#false} is VALID [2022-02-20 18:12:02,367 INFO L290 TraceCheckUtils]: 33: Hoare triple {3341#false} assume true; {3341#false} is VALID [2022-02-20 18:12:02,367 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {3341#false} {3341#false} #236#return; {3341#false} is VALID [2022-02-20 18:12:02,367 INFO L290 TraceCheckUtils]: 35: Hoare triple {3341#false} assume { :end_inline_processEnvironment } true; {3341#false} is VALID [2022-02-20 18:12:02,367 INFO L290 TraceCheckUtils]: 36: Hoare triple {3341#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {3341#false} is VALID [2022-02-20 18:12:02,368 INFO L290 TraceCheckUtils]: 37: Hoare triple {3341#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {3341#false} is VALID [2022-02-20 18:12:02,368 INFO L290 TraceCheckUtils]: 38: Hoare triple {3341#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {3341#false} is VALID [2022-02-20 18:12:02,368 INFO L272 TraceCheckUtils]: 39: Hoare triple {3341#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {3340#true} is VALID [2022-02-20 18:12:02,368 INFO L290 TraceCheckUtils]: 40: Hoare triple {3340#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {3340#true} is VALID [2022-02-20 18:12:02,368 INFO L290 TraceCheckUtils]: 41: Hoare triple {3340#true} assume true; {3340#true} is VALID [2022-02-20 18:12:02,369 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {3340#true} {3341#false} #238#return; {3341#false} is VALID [2022-02-20 18:12:02,369 INFO L290 TraceCheckUtils]: 43: Hoare triple {3341#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {3341#false} is VALID [2022-02-20 18:12:02,369 INFO L290 TraceCheckUtils]: 44: Hoare triple {3341#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {3341#false} is VALID [2022-02-20 18:12:02,369 INFO L290 TraceCheckUtils]: 45: Hoare triple {3341#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {3341#false} is VALID [2022-02-20 18:12:02,369 INFO L290 TraceCheckUtils]: 46: Hoare triple {3341#false} assume !false; {3341#false} is VALID [2022-02-20 18:12:02,370 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:02,370 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:02,370 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63464451] [2022-02-20 18:12:02,370 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [63464451] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:02,370 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:02,370 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:02,371 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [336628735] [2022-02-20 18:12:02,371 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:02,371 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-02-20 18:12:02,372 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:02,372 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:12:02,405 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,405 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:02,405 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:02,406 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:02,406 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:02,406 INFO L87 Difference]: Start difference. First operand 176 states and 227 transitions. Second operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:12:02,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,841 INFO L93 Difference]: Finished difference Result 328 states and 423 transitions. [2022-02-20 18:12:02,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:02,842 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-02-20 18:12:02,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:02,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:12:02,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2022-02-20 18:12:02,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:12:02,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2022-02-20 18:12:02,850 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 224 transitions. [2022-02-20 18:12:03,014 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:03,017 INFO L225 Difference]: With dead ends: 328 [2022-02-20 18:12:03,017 INFO L226 Difference]: Without dead ends: 160 [2022-02-20 18:12:03,018 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:12:03,019 INFO L933 BasicCegarLoop]: 93 mSDtfsCounter, 85 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:03,019 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [92 Valid, 358 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:03,020 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-02-20 18:12:03,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 149. [2022-02-20 18:12:03,027 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:03,028 INFO L82 GeneralOperation]: Start isEquivalent. First operand 160 states. Second operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:03,028 INFO L74 IsIncluded]: Start isIncluded. First operand 160 states. Second operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:03,029 INFO L87 Difference]: Start difference. First operand 160 states. Second operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:03,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,034 INFO L93 Difference]: Finished difference Result 160 states and 195 transitions. [2022-02-20 18:12:03,034 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 195 transitions. [2022-02-20 18:12:03,035 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:03,035 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:03,035 INFO L74 IsIncluded]: Start isIncluded. First operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 160 states. [2022-02-20 18:12:03,036 INFO L87 Difference]: Start difference. First operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) Second operand 160 states. [2022-02-20 18:12:03,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,041 INFO L93 Difference]: Finished difference Result 160 states and 195 transitions. [2022-02-20 18:12:03,041 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 195 transitions. [2022-02-20 18:12:03,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:03,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:03,042 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:03,042 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:03,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 116 states have (on average 1.2586206896551724) internal successors, (146), 123 states have internal predecessors, (146), 16 states have call successors, (16), 13 states have call predecessors, (16), 16 states have return successors, (21), 17 states have call predecessors, (21), 16 states have call successors, (21) [2022-02-20 18:12:03,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 183 transitions. [2022-02-20 18:12:03,047 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 183 transitions. Word has length 47 [2022-02-20 18:12:03,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:03,047 INFO L470 AbstractCegarLoop]: Abstraction has 149 states and 183 transitions. [2022-02-20 18:12:03,048 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.166666666666667) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-02-20 18:12:03,048 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 183 transitions. [2022-02-20 18:12:03,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:03,048 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:03,048 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:03,048 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:12:03,049 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:03,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:03,049 INFO L85 PathProgramCache]: Analyzing trace with hash -2136447531, now seen corresponding path program 1 times [2022-02-20 18:12:03,049 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:03,049 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556750229] [2022-02-20 18:12:03,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:03,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:03,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:03,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,108 INFO L290 TraceCheckUtils]: 0: Hoare triple {4357#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {4357#true} is VALID [2022-02-20 18:12:03,108 INFO L290 TraceCheckUtils]: 1: Hoare triple {4357#true} assume true; {4357#true} is VALID [2022-02-20 18:12:03,109 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4357#true} {4359#(= ~waterLevel~0 1)} #232#return; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:03,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,129 INFO L290 TraceCheckUtils]: 0: Hoare triple {4377#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {4357#true} is VALID [2022-02-20 18:12:03,129 INFO L290 TraceCheckUtils]: 1: Hoare triple {4357#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {4357#true} is VALID [2022-02-20 18:12:03,130 INFO L290 TraceCheckUtils]: 2: Hoare triple {4357#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,130 INFO L290 TraceCheckUtils]: 3: Hoare triple {4378#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,130 INFO L290 TraceCheckUtils]: 4: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,131 INFO L290 TraceCheckUtils]: 5: Hoare triple {4378#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,131 INFO L290 TraceCheckUtils]: 6: Hoare triple {4378#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,132 INFO L290 TraceCheckUtils]: 7: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,132 INFO L290 TraceCheckUtils]: 8: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,132 INFO L290 TraceCheckUtils]: 9: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume true; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,133 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {4378#(<= 2 ~waterLevel~0)} {4359#(= ~waterLevel~0 1)} #236#return; {4358#false} is VALID [2022-02-20 18:12:03,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:03,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,137 INFO L290 TraceCheckUtils]: 0: Hoare triple {4357#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {4357#true} is VALID [2022-02-20 18:12:03,137 INFO L290 TraceCheckUtils]: 1: Hoare triple {4357#true} assume true; {4357#true} is VALID [2022-02-20 18:12:03,137 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {4357#true} {4358#false} #238#return; {4358#false} is VALID [2022-02-20 18:12:03,138 INFO L290 TraceCheckUtils]: 0: Hoare triple {4357#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,138 INFO L290 TraceCheckUtils]: 1: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,139 INFO L290 TraceCheckUtils]: 2: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,139 INFO L290 TraceCheckUtils]: 3: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,140 INFO L290 TraceCheckUtils]: 4: Hoare triple {4359#(= ~waterLevel~0 1)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,140 INFO L290 TraceCheckUtils]: 5: Hoare triple {4359#(= ~waterLevel~0 1)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,140 INFO L290 TraceCheckUtils]: 6: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,141 INFO L290 TraceCheckUtils]: 7: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,141 INFO L290 TraceCheckUtils]: 8: Hoare triple {4359#(= ~waterLevel~0 1)} assume !false; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,141 INFO L290 TraceCheckUtils]: 9: Hoare triple {4359#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,142 INFO L290 TraceCheckUtils]: 10: Hoare triple {4359#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,142 INFO L290 TraceCheckUtils]: 11: Hoare triple {4359#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~5#1); {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,144 INFO L290 TraceCheckUtils]: 12: Hoare triple {4359#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,144 INFO L290 TraceCheckUtils]: 13: Hoare triple {4359#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~2#1); {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,144 INFO L290 TraceCheckUtils]: 14: Hoare triple {4359#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,145 INFO L290 TraceCheckUtils]: 15: Hoare triple {4359#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,146 INFO L272 TraceCheckUtils]: 16: Hoare triple {4359#(= ~waterLevel~0 1)} call timeShift(); {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,146 INFO L290 TraceCheckUtils]: 17: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,146 INFO L272 TraceCheckUtils]: 18: Hoare triple {4359#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {4357#true} is VALID [2022-02-20 18:12:03,147 INFO L290 TraceCheckUtils]: 19: Hoare triple {4357#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {4357#true} is VALID [2022-02-20 18:12:03,147 INFO L290 TraceCheckUtils]: 20: Hoare triple {4357#true} assume true; {4357#true} is VALID [2022-02-20 18:12:03,148 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {4357#true} {4359#(= ~waterLevel~0 1)} #232#return; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,148 INFO L290 TraceCheckUtils]: 22: Hoare triple {4359#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 23: Hoare triple {4359#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 24: Hoare triple {4359#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 25: Hoare triple {4359#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L290 TraceCheckUtils]: 26: Hoare triple {4359#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {4359#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L272 TraceCheckUtils]: 27: Hoare triple {4359#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {4377#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:03,151 INFO L290 TraceCheckUtils]: 28: Hoare triple {4377#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {4357#true} is VALID [2022-02-20 18:12:03,151 INFO L290 TraceCheckUtils]: 29: Hoare triple {4357#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {4357#true} is VALID [2022-02-20 18:12:03,151 INFO L290 TraceCheckUtils]: 30: Hoare triple {4357#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 31: Hoare triple {4378#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 32: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 33: Hoare triple {4378#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 34: Hoare triple {4378#(<= 2 ~waterLevel~0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 35: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 36: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,154 INFO L290 TraceCheckUtils]: 37: Hoare triple {4378#(<= 2 ~waterLevel~0)} assume true; {4378#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,154 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {4378#(<= 2 ~waterLevel~0)} {4359#(= ~waterLevel~0 1)} #236#return; {4358#false} is VALID [2022-02-20 18:12:03,154 INFO L290 TraceCheckUtils]: 39: Hoare triple {4358#false} assume { :end_inline_processEnvironment } true; {4358#false} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 40: Hoare triple {4358#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {4358#false} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 41: Hoare triple {4358#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {4358#false} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 42: Hoare triple {4358#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {4358#false} is VALID [2022-02-20 18:12:03,155 INFO L272 TraceCheckUtils]: 43: Hoare triple {4358#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {4357#true} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 44: Hoare triple {4357#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {4357#true} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 45: Hoare triple {4357#true} assume true; {4357#true} is VALID [2022-02-20 18:12:03,155 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {4357#true} {4358#false} #238#return; {4358#false} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 47: Hoare triple {4358#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {4358#false} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 48: Hoare triple {4358#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {4358#false} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 49: Hoare triple {4358#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {4358#false} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 50: Hoare triple {4358#false} assume !false; {4358#false} is VALID [2022-02-20 18:12:03,156 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:03,156 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:03,156 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556750229] [2022-02-20 18:12:03,157 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [556750229] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:03,157 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:03,157 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:03,157 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954909407] [2022-02-20 18:12:03,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:03,158 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:03,158 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:03,158 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,197 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:03,197 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:03,197 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:03,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:03,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:03,198 INFO L87 Difference]: Start difference. First operand 149 states and 183 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,854 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,854 INFO L93 Difference]: Finished difference Result 427 states and 545 transitions. [2022-02-20 18:12:03,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:03,854 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:03,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:03,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 353 transitions. [2022-02-20 18:12:03,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 353 transitions. [2022-02-20 18:12:03,869 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 353 transitions. [2022-02-20 18:12:04,162 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 353 edges. 353 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,171 INFO L225 Difference]: With dead ends: 427 [2022-02-20 18:12:04,171 INFO L226 Difference]: Without dead ends: 286 [2022-02-20 18:12:04,172 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:04,172 INFO L933 BasicCegarLoop]: 145 mSDtfsCounter, 207 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 214 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:04,173 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [214 Valid, 309 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:04,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2022-02-20 18:12:04,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 278. [2022-02-20 18:12:04,214 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:04,215 INFO L82 GeneralOperation]: Start isEquivalent. First operand 286 states. Second operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:04,216 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:04,216 INFO L87 Difference]: Start difference. First operand 286 states. Second operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:04,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,225 INFO L93 Difference]: Finished difference Result 286 states and 352 transitions. [2022-02-20 18:12:04,225 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 352 transitions. [2022-02-20 18:12:04,226 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,226 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,227 INFO L74 IsIncluded]: Start isIncluded. First operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 286 states. [2022-02-20 18:12:04,228 INFO L87 Difference]: Start difference. First operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 286 states. [2022-02-20 18:12:04,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,236 INFO L93 Difference]: Finished difference Result 286 states and 352 transitions. [2022-02-20 18:12:04,236 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 352 transitions. [2022-02-20 18:12:04,237 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,237 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,237 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:04,237 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:04,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 213 states have (on average 1.244131455399061) internal successors, (265), 224 states have internal predecessors, (265), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:04,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 348 transitions. [2022-02-20 18:12:04,247 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 348 transitions. Word has length 51 [2022-02-20 18:12:04,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:04,248 INFO L470 AbstractCegarLoop]: Abstraction has 278 states and 348 transitions. [2022-02-20 18:12:04,248 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:04,248 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 348 transitions. [2022-02-20 18:12:04,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-20 18:12:04,249 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:04,249 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:04,249 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:12:04,249 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:04,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:04,250 INFO L85 PathProgramCache]: Analyzing trace with hash -1858186128, now seen corresponding path program 1 times [2022-02-20 18:12:04,250 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:04,250 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2003476445] [2022-02-20 18:12:04,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:04,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:04,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:04,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,305 INFO L290 TraceCheckUtils]: 0: Hoare triple {5934#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {5934#true} is VALID [2022-02-20 18:12:04,306 INFO L290 TraceCheckUtils]: 1: Hoare triple {5934#true} assume true; {5934#true} is VALID [2022-02-20 18:12:04,306 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5934#true} {5936#(= ~pumpRunning~0 0)} #232#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:04,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-02-20 18:12:04,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,324 INFO L290 TraceCheckUtils]: 0: Hoare triple {5934#true} assume true; {5934#true} is VALID [2022-02-20 18:12:04,324 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {5934#true} {5936#(= ~pumpRunning~0 0)} #252#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,325 INFO L290 TraceCheckUtils]: 0: Hoare triple {5958#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {5934#true} is VALID [2022-02-20 18:12:04,325 INFO L290 TraceCheckUtils]: 1: Hoare triple {5934#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,325 INFO L290 TraceCheckUtils]: 2: Hoare triple {5936#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,326 INFO L290 TraceCheckUtils]: 3: Hoare triple {5936#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,326 INFO L290 TraceCheckUtils]: 4: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,326 INFO L290 TraceCheckUtils]: 5: Hoare triple {5936#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,327 INFO L290 TraceCheckUtils]: 6: Hoare triple {5936#(= ~pumpRunning~0 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,327 INFO L290 TraceCheckUtils]: 7: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~2#1); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,327 INFO L272 TraceCheckUtils]: 8: Hoare triple {5936#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {5934#true} is VALID [2022-02-20 18:12:04,327 INFO L290 TraceCheckUtils]: 9: Hoare triple {5934#true} assume true; {5934#true} is VALID [2022-02-20 18:12:04,328 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5934#true} {5936#(= ~pumpRunning~0 0)} #252#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,328 INFO L290 TraceCheckUtils]: 11: Hoare triple {5936#(= ~pumpRunning~0 0)} assume true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,328 INFO L284 TraceCheckUtils]: 12: Hoare quadruple {5936#(= ~pumpRunning~0 0)} {5936#(= ~pumpRunning~0 0)} #236#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-20 18:12:04,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,338 INFO L290 TraceCheckUtils]: 0: Hoare triple {5934#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:04,338 INFO L290 TraceCheckUtils]: 1: Hoare triple {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:04,339 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} {5936#(= ~pumpRunning~0 0)} #238#return; {5956#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret11#1|)} is VALID [2022-02-20 18:12:04,339 INFO L290 TraceCheckUtils]: 0: Hoare triple {5934#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,340 INFO L290 TraceCheckUtils]: 1: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,341 INFO L290 TraceCheckUtils]: 2: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,341 INFO L290 TraceCheckUtils]: 3: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,341 INFO L290 TraceCheckUtils]: 4: Hoare triple {5936#(= ~pumpRunning~0 0)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,345 INFO L290 TraceCheckUtils]: 5: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,346 INFO L290 TraceCheckUtils]: 6: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,346 INFO L290 TraceCheckUtils]: 7: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,346 INFO L290 TraceCheckUtils]: 8: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !false; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,348 INFO L290 TraceCheckUtils]: 9: Hoare triple {5936#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,348 INFO L290 TraceCheckUtils]: 10: Hoare triple {5936#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,348 INFO L290 TraceCheckUtils]: 11: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~5#1); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,349 INFO L290 TraceCheckUtils]: 12: Hoare triple {5936#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,349 INFO L290 TraceCheckUtils]: 13: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~2#1); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,349 INFO L290 TraceCheckUtils]: 14: Hoare triple {5936#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,350 INFO L290 TraceCheckUtils]: 15: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___2~0#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,350 INFO L272 TraceCheckUtils]: 16: Hoare triple {5936#(= ~pumpRunning~0 0)} call timeShift(); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,350 INFO L290 TraceCheckUtils]: 17: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,351 INFO L272 TraceCheckUtils]: 18: Hoare triple {5936#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {5934#true} is VALID [2022-02-20 18:12:04,351 INFO L290 TraceCheckUtils]: 19: Hoare triple {5934#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {5934#true} is VALID [2022-02-20 18:12:04,351 INFO L290 TraceCheckUtils]: 20: Hoare triple {5934#true} assume true; {5934#true} is VALID [2022-02-20 18:12:04,351 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5934#true} {5936#(= ~pumpRunning~0 0)} #232#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,352 INFO L290 TraceCheckUtils]: 22: Hoare triple {5936#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,352 INFO L290 TraceCheckUtils]: 23: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,352 INFO L290 TraceCheckUtils]: 24: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,352 INFO L290 TraceCheckUtils]: 25: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,353 INFO L290 TraceCheckUtils]: 26: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,353 INFO L272 TraceCheckUtils]: 27: Hoare triple {5936#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__highWaterSensor(); {5958#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:04,353 INFO L290 TraceCheckUtils]: 28: Hoare triple {5958#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {5934#true} is VALID [2022-02-20 18:12:04,354 INFO L290 TraceCheckUtils]: 29: Hoare triple {5934#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,354 INFO L290 TraceCheckUtils]: 30: Hoare triple {5936#(= ~pumpRunning~0 0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,354 INFO L290 TraceCheckUtils]: 31: Hoare triple {5936#(= ~pumpRunning~0 0)} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,355 INFO L290 TraceCheckUtils]: 32: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 0 != isHighWaterLevel_~tmp~4#1;isHighWaterLevel_~tmp___0~1#1 := 0; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,355 INFO L290 TraceCheckUtils]: 33: Hoare triple {5936#(= ~pumpRunning~0 0)} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,355 INFO L290 TraceCheckUtils]: 34: Hoare triple {5936#(= ~pumpRunning~0 0)} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,355 INFO L290 TraceCheckUtils]: 35: Hoare triple {5936#(= ~pumpRunning~0 0)} assume !(0 != ~tmp~2#1); {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,356 INFO L272 TraceCheckUtils]: 36: Hoare triple {5936#(= ~pumpRunning~0 0)} call processEnvironment__wrappee__base(); {5934#true} is VALID [2022-02-20 18:12:04,356 INFO L290 TraceCheckUtils]: 37: Hoare triple {5934#true} assume true; {5934#true} is VALID [2022-02-20 18:12:04,356 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {5934#true} {5936#(= ~pumpRunning~0 0)} #252#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,356 INFO L290 TraceCheckUtils]: 39: Hoare triple {5936#(= ~pumpRunning~0 0)} assume true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,357 INFO L284 TraceCheckUtils]: 40: Hoare quadruple {5936#(= ~pumpRunning~0 0)} {5936#(= ~pumpRunning~0 0)} #236#return; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,357 INFO L290 TraceCheckUtils]: 41: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :end_inline_processEnvironment } true; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,357 INFO L290 TraceCheckUtils]: 42: Hoare triple {5936#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,358 INFO L290 TraceCheckUtils]: 43: Hoare triple {5936#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,358 INFO L290 TraceCheckUtils]: 44: Hoare triple {5936#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {5936#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:04,358 INFO L272 TraceCheckUtils]: 45: Hoare triple {5936#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {5934#true} is VALID [2022-02-20 18:12:04,359 INFO L290 TraceCheckUtils]: 46: Hoare triple {5934#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:04,359 INFO L290 TraceCheckUtils]: 47: Hoare triple {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:04,359 INFO L284 TraceCheckUtils]: 48: Hoare quadruple {5961#(= ~pumpRunning~0 |isPumpRunning_#res|)} {5936#(= ~pumpRunning~0 0)} #238#return; {5956#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret11#1|)} is VALID [2022-02-20 18:12:04,360 INFO L290 TraceCheckUtils]: 49: Hoare triple {5956#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret11#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {5957#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:04,360 INFO L290 TraceCheckUtils]: 50: Hoare triple {5957#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~0#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {5935#false} is VALID [2022-02-20 18:12:04,360 INFO L290 TraceCheckUtils]: 51: Hoare triple {5935#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5935#false} is VALID [2022-02-20 18:12:04,360 INFO L290 TraceCheckUtils]: 52: Hoare triple {5935#false} assume !false; {5935#false} is VALID [2022-02-20 18:12:04,361 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:12:04,361 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:04,361 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2003476445] [2022-02-20 18:12:04,361 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2003476445] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:04,361 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:04,361 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:12:04,361 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [718848866] [2022-02-20 18:12:04,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:04,362 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-02-20 18:12:04,362 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:04,362 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:04,398 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,398 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:12:04,398 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:04,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:12:04,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:04,399 INFO L87 Difference]: Start difference. First operand 278 states and 348 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:05,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:05,037 INFO L93 Difference]: Finished difference Result 564 states and 717 transitions. [2022-02-20 18:12:05,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-02-20 18:12:05,037 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) Word has length 53 [2022-02-20 18:12:05,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:05,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:05,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 272 transitions. [2022-02-20 18:12:05,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:05,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 272 transitions. [2022-02-20 18:12:05,047 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 272 transitions. [2022-02-20 18:12:05,246 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 272 edges. 272 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:05,255 INFO L225 Difference]: With dead ends: 564 [2022-02-20 18:12:05,255 INFO L226 Difference]: Without dead ends: 294 [2022-02-20 18:12:05,256 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:05,257 INFO L933 BasicCegarLoop]: 94 mSDtfsCounter, 103 mSDsluCounter, 329 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:05,257 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [109 Valid, 423 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:05,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-02-20 18:12:05,293 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 274. [2022-02-20 18:12:05,293 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:05,294 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:05,294 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:05,295 INFO L87 Difference]: Start difference. First operand 294 states. Second operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:05,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:05,304 INFO L93 Difference]: Finished difference Result 294 states and 364 transitions. [2022-02-20 18:12:05,304 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 364 transitions. [2022-02-20 18:12:05,305 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:05,305 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:05,306 INFO L74 IsIncluded]: Start isIncluded. First operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 294 states. [2022-02-20 18:12:05,307 INFO L87 Difference]: Start difference. First operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) Second operand 294 states. [2022-02-20 18:12:05,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:05,316 INFO L93 Difference]: Finished difference Result 294 states and 364 transitions. [2022-02-20 18:12:05,316 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 364 transitions. [2022-02-20 18:12:05,317 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:05,317 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:05,317 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:05,317 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:05,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 209 states have (on average 1.2105263157894737) internal successors, (253), 220 states have internal predecessors, (253), 34 states have call successors, (34), 29 states have call predecessors, (34), 30 states have return successors, (49), 34 states have call predecessors, (49), 34 states have call successors, (49) [2022-02-20 18:12:05,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 336 transitions. [2022-02-20 18:12:05,327 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 336 transitions. Word has length 53 [2022-02-20 18:12:05,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:05,327 INFO L470 AbstractCegarLoop]: Abstraction has 274 states and 336 transitions. [2022-02-20 18:12:05,327 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 1 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 1 states have call successors, (4) [2022-02-20 18:12:05,327 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 336 transitions. [2022-02-20 18:12:05,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:05,328 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:05,328 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:05,328 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:05,329 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:05,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:05,329 INFO L85 PathProgramCache]: Analyzing trace with hash -2030829189, now seen corresponding path program 1 times [2022-02-20 18:12:05,329 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:05,329 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094942712] [2022-02-20 18:12:05,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:05,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:05,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:05,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {7758#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,450 INFO L290 TraceCheckUtils]: 1: Hoare triple {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,451 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7734#(= ~waterLevel~0 1)} #244#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:05,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,458 INFO L290 TraceCheckUtils]: 0: Hoare triple {7732#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {7732#true} is VALID [2022-02-20 18:12:05,458 INFO L290 TraceCheckUtils]: 1: Hoare triple {7732#true} assume true; {7732#true} is VALID [2022-02-20 18:12:05,459 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7732#true} {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #232#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:12:05,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,482 INFO L290 TraceCheckUtils]: 0: Hoare triple {7760#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {7732#true} is VALID [2022-02-20 18:12:05,483 INFO L290 TraceCheckUtils]: 1: Hoare triple {7732#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7732#true} is VALID [2022-02-20 18:12:05,484 INFO L290 TraceCheckUtils]: 2: Hoare triple {7732#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,484 INFO L290 TraceCheckUtils]: 3: Hoare triple {7761#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,484 INFO L290 TraceCheckUtils]: 4: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,485 INFO L290 TraceCheckUtils]: 5: Hoare triple {7761#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,485 INFO L290 TraceCheckUtils]: 6: Hoare triple {7761#(not (<= ~waterLevel~0 1))} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,485 INFO L290 TraceCheckUtils]: 7: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,486 INFO L290 TraceCheckUtils]: 8: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,486 INFO L290 TraceCheckUtils]: 9: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume true; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,486 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {7761#(not (<= ~waterLevel~0 1))} {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #236#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:05,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:05,495 INFO L290 TraceCheckUtils]: 0: Hoare triple {7732#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {7732#true} is VALID [2022-02-20 18:12:05,495 INFO L290 TraceCheckUtils]: 1: Hoare triple {7732#true} assume true; {7732#true} is VALID [2022-02-20 18:12:05,495 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7732#true} {7733#false} #238#return; {7733#false} is VALID [2022-02-20 18:12:05,496 INFO L290 TraceCheckUtils]: 0: Hoare triple {7732#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,496 INFO L290 TraceCheckUtils]: 1: Hoare triple {7734#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,496 INFO L290 TraceCheckUtils]: 2: Hoare triple {7734#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,497 INFO L290 TraceCheckUtils]: 3: Hoare triple {7734#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,497 INFO L290 TraceCheckUtils]: 4: Hoare triple {7734#(= ~waterLevel~0 1)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,497 INFO L290 TraceCheckUtils]: 5: Hoare triple {7734#(= ~waterLevel~0 1)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,497 INFO L290 TraceCheckUtils]: 6: Hoare triple {7734#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,498 INFO L290 TraceCheckUtils]: 7: Hoare triple {7734#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,498 INFO L290 TraceCheckUtils]: 8: Hoare triple {7734#(= ~waterLevel~0 1)} assume !false; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,498 INFO L290 TraceCheckUtils]: 9: Hoare triple {7734#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,499 INFO L290 TraceCheckUtils]: 10: Hoare triple {7734#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,499 INFO L290 TraceCheckUtils]: 11: Hoare triple {7734#(= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {7734#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:05,499 INFO L272 TraceCheckUtils]: 12: Hoare triple {7734#(= ~waterLevel~0 1)} call waterRise(); {7758#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:05,500 INFO L290 TraceCheckUtils]: 13: Hoare triple {7758#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,500 INFO L290 TraceCheckUtils]: 14: Hoare triple {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,501 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {7759#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {7734#(= ~waterLevel~0 1)} #244#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,502 INFO L290 TraceCheckUtils]: 16: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,502 INFO L290 TraceCheckUtils]: 17: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2#1); {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,502 INFO L290 TraceCheckUtils]: 18: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,503 INFO L290 TraceCheckUtils]: 19: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,503 INFO L272 TraceCheckUtils]: 20: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call timeShift(); {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,503 INFO L290 TraceCheckUtils]: 21: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,504 INFO L272 TraceCheckUtils]: 22: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {7732#true} is VALID [2022-02-20 18:12:05,504 INFO L290 TraceCheckUtils]: 23: Hoare triple {7732#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {7732#true} is VALID [2022-02-20 18:12:05,504 INFO L290 TraceCheckUtils]: 24: Hoare triple {7732#true} assume true; {7732#true} is VALID [2022-02-20 18:12:05,504 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {7732#true} {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #232#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,505 INFO L290 TraceCheckUtils]: 26: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,505 INFO L290 TraceCheckUtils]: 27: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,506 INFO L290 TraceCheckUtils]: 28: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,506 INFO L290 TraceCheckUtils]: 29: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,506 INFO L290 TraceCheckUtils]: 30: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,507 INFO L272 TraceCheckUtils]: 31: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call processEnvironment__wrappee__highWaterSensor(); {7760#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:05,507 INFO L290 TraceCheckUtils]: 32: Hoare triple {7760#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {7732#true} is VALID [2022-02-20 18:12:05,507 INFO L290 TraceCheckUtils]: 33: Hoare triple {7732#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {7732#true} is VALID [2022-02-20 18:12:05,507 INFO L290 TraceCheckUtils]: 34: Hoare triple {7732#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,508 INFO L290 TraceCheckUtils]: 35: Hoare triple {7761#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,508 INFO L290 TraceCheckUtils]: 36: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,508 INFO L290 TraceCheckUtils]: 37: Hoare triple {7761#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,509 INFO L290 TraceCheckUtils]: 38: Hoare triple {7761#(not (<= ~waterLevel~0 1))} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,509 INFO L290 TraceCheckUtils]: 39: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,509 INFO L290 TraceCheckUtils]: 40: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,510 INFO L290 TraceCheckUtils]: 41: Hoare triple {7761#(not (<= ~waterLevel~0 1))} assume true; {7761#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:05,510 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {7761#(not (<= ~waterLevel~0 1))} {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #236#return; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,510 INFO L290 TraceCheckUtils]: 43: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:05,511 INFO L290 TraceCheckUtils]: 44: Hoare triple {7738#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {7753#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:05,511 INFO L290 TraceCheckUtils]: 45: Hoare triple {7753#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {7754#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 46: Hoare triple {7754#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {7733#false} is VALID [2022-02-20 18:12:05,512 INFO L272 TraceCheckUtils]: 47: Hoare triple {7733#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {7732#true} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 48: Hoare triple {7732#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {7732#true} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 49: Hoare triple {7732#true} assume true; {7732#true} is VALID [2022-02-20 18:12:05,512 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {7732#true} {7733#false} #238#return; {7733#false} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 51: Hoare triple {7733#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {7733#false} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 52: Hoare triple {7733#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {7733#false} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 53: Hoare triple {7733#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {7733#false} is VALID [2022-02-20 18:12:05,512 INFO L290 TraceCheckUtils]: 54: Hoare triple {7733#false} assume !false; {7733#false} is VALID [2022-02-20 18:12:05,513 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:05,513 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:05,513 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094942712] [2022-02-20 18:12:05,513 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094942712] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:05,514 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:05,514 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:05,514 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149642841] [2022-02-20 18:12:05,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:05,514 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:05,515 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:05,515 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:05,553 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:05,553 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:05,553 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:05,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:05,554 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:05,555 INFO L87 Difference]: Start difference. First operand 274 states and 336 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:07,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:07,807 INFO L93 Difference]: Finished difference Result 810 states and 1029 transitions. [2022-02-20 18:12:07,807 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-02-20 18:12:07,808 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:07,808 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:07,808 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:07,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 527 transitions. [2022-02-20 18:12:07,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:07,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 527 transitions. [2022-02-20 18:12:07,822 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 29 states and 527 transitions. [2022-02-20 18:12:08,232 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 527 edges. 527 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:08,258 INFO L225 Difference]: With dead ends: 810 [2022-02-20 18:12:08,258 INFO L226 Difference]: Without dead ends: 594 [2022-02-20 18:12:08,259 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 199 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2022-02-20 18:12:08,260 INFO L933 BasicCegarLoop]: 147 mSDtfsCounter, 457 mSDsluCounter, 647 mSDsCounter, 0 mSdLazyCounter, 724 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 463 SdHoareTripleChecker+Valid, 794 SdHoareTripleChecker+Invalid, 878 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:08,260 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [463 Valid, 794 Invalid, 878 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 724 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-02-20 18:12:08,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 594 states. [2022-02-20 18:12:08,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 594 to 507. [2022-02-20 18:12:08,380 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:08,381 INFO L82 GeneralOperation]: Start isEquivalent. First operand 594 states. Second operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:08,382 INFO L74 IsIncluded]: Start isIncluded. First operand 594 states. Second operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:08,384 INFO L87 Difference]: Start difference. First operand 594 states. Second operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:08,413 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:08,413 INFO L93 Difference]: Finished difference Result 594 states and 728 transitions. [2022-02-20 18:12:08,413 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 728 transitions. [2022-02-20 18:12:08,415 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:08,415 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:08,418 INFO L74 IsIncluded]: Start isIncluded. First operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) Second operand 594 states. [2022-02-20 18:12:08,419 INFO L87 Difference]: Start difference. First operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) Second operand 594 states. [2022-02-20 18:12:08,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:08,443 INFO L93 Difference]: Finished difference Result 594 states and 728 transitions. [2022-02-20 18:12:08,443 INFO L276 IsEmpty]: Start isEmpty. Operand 594 states and 728 transitions. [2022-02-20 18:12:08,445 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:08,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:08,445 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:08,445 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:08,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 507 states, 388 states have (on average 1.2036082474226804) internal successors, (467), 410 states have internal predecessors, (467), 61 states have call successors, (61), 51 states have call predecessors, (61), 57 states have return successors, (85), 61 states have call predecessors, (85), 61 states have call successors, (85) [2022-02-20 18:12:08,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 507 states to 507 states and 613 transitions. [2022-02-20 18:12:08,468 INFO L78 Accepts]: Start accepts. Automaton has 507 states and 613 transitions. Word has length 55 [2022-02-20 18:12:08,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:08,469 INFO L470 AbstractCegarLoop]: Abstraction has 507 states and 613 transitions. [2022-02-20 18:12:08,469 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:08,469 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 613 transitions. [2022-02-20 18:12:08,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-02-20 18:12:08,470 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:08,470 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:08,471 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:08,471 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:08,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:08,471 INFO L85 PathProgramCache]: Analyzing trace with hash 309041265, now seen corresponding path program 1 times [2022-02-20 18:12:08,471 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:08,472 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1992499428] [2022-02-20 18:12:08,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:08,472 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:08,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:08,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,543 INFO L290 TraceCheckUtils]: 0: Hoare triple {10878#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10827#true} is VALID [2022-02-20 18:12:08,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,544 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10827#true} {10829#(= 1 ~systemActive~0)} #244#return; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:08,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:08,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,577 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:08,577 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,578 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10827#true} {10827#true} #232#return; {10827#true} is VALID [2022-02-20 18:12:08,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:08,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,602 INFO L290 TraceCheckUtils]: 0: Hoare triple {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:08,603 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,603 INFO L290 TraceCheckUtils]: 2: Hoare triple {10827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,603 INFO L290 TraceCheckUtils]: 3: Hoare triple {10827#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {10827#true} is VALID [2022-02-20 18:12:08,603 INFO L290 TraceCheckUtils]: 4: Hoare triple {10827#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {10827#true} is VALID [2022-02-20 18:12:08,603 INFO L290 TraceCheckUtils]: 5: Hoare triple {10827#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10827#true} is VALID [2022-02-20 18:12:08,604 INFO L290 TraceCheckUtils]: 6: Hoare triple {10827#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {10827#true} is VALID [2022-02-20 18:12:08,604 INFO L290 TraceCheckUtils]: 7: Hoare triple {10827#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,604 INFO L290 TraceCheckUtils]: 8: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,605 INFO L290 TraceCheckUtils]: 9: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,605 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #236#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,606 INFO L290 TraceCheckUtils]: 0: Hoare triple {10879#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:08,606 INFO L272 TraceCheckUtils]: 1: Hoare triple {10827#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:08,606 INFO L290 TraceCheckUtils]: 2: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:08,606 INFO L290 TraceCheckUtils]: 3: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,606 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10827#true} {10827#true} #232#return; {10827#true} is VALID [2022-02-20 18:12:08,607 INFO L290 TraceCheckUtils]: 5: Hoare triple {10827#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:08,607 INFO L290 TraceCheckUtils]: 6: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10827#true} is VALID [2022-02-20 18:12:08,607 INFO L290 TraceCheckUtils]: 7: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,607 INFO L290 TraceCheckUtils]: 8: Hoare triple {10827#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {10827#true} is VALID [2022-02-20 18:12:08,607 INFO L290 TraceCheckUtils]: 9: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,608 INFO L272 TraceCheckUtils]: 10: Hoare triple {10827#true} call processEnvironment__wrappee__highWaterSensor(); {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:08,608 INFO L290 TraceCheckUtils]: 11: Hoare triple {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:08,608 INFO L290 TraceCheckUtils]: 12: Hoare triple {10827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,608 INFO L290 TraceCheckUtils]: 13: Hoare triple {10827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,608 INFO L290 TraceCheckUtils]: 14: Hoare triple {10827#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {10827#true} is VALID [2022-02-20 18:12:08,609 INFO L290 TraceCheckUtils]: 15: Hoare triple {10827#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {10827#true} is VALID [2022-02-20 18:12:08,609 INFO L290 TraceCheckUtils]: 16: Hoare triple {10827#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10827#true} is VALID [2022-02-20 18:12:08,609 INFO L290 TraceCheckUtils]: 17: Hoare triple {10827#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {10827#true} is VALID [2022-02-20 18:12:08,609 INFO L290 TraceCheckUtils]: 18: Hoare triple {10827#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,610 INFO L290 TraceCheckUtils]: 19: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,610 INFO L290 TraceCheckUtils]: 20: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,611 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #236#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,611 INFO L290 TraceCheckUtils]: 22: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,611 INFO L290 TraceCheckUtils]: 23: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,612 INFO L290 TraceCheckUtils]: 24: Hoare triple {10894#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,612 INFO L290 TraceCheckUtils]: 25: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,613 INFO L290 TraceCheckUtils]: 26: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,635 INFO L290 TraceCheckUtils]: 27: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,636 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10829#(= 1 ~systemActive~0)} #248#return; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:08,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,648 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:08,649 INFO L290 TraceCheckUtils]: 1: Hoare triple {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:08,650 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} {10862#(not (= ~pumpRunning~0 0))} #232#return; {10866#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1| 0))} is VALID [2022-02-20 18:12:08,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-02-20 18:12:08,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:08,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,658 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,658 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {10827#true} {10827#true} #254#return; {10827#true} is VALID [2022-02-20 18:12:08,658 INFO L290 TraceCheckUtils]: 0: Hoare triple {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:08,659 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume !(0 == ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,659 INFO L272 TraceCheckUtils]: 2: Hoare triple {10827#true} call processEnvironment__wrappee__base(); {10827#true} is VALID [2022-02-20 18:12:08,659 INFO L290 TraceCheckUtils]: 3: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,659 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {10827#true} {10827#true} #254#return; {10827#true} is VALID [2022-02-20 18:12:08,659 INFO L290 TraceCheckUtils]: 5: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,660 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {10827#true} {10867#(not (= ~switchedOnBeforeTS~0 0))} #234#return; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-02-20 18:12:08,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,663 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:08,664 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,664 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10827#true} {10867#(not (= ~switchedOnBeforeTS~0 0))} #238#return; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,666 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,666 INFO L290 TraceCheckUtils]: 1: Hoare triple {10829#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,667 INFO L290 TraceCheckUtils]: 2: Hoare triple {10829#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,667 INFO L290 TraceCheckUtils]: 3: Hoare triple {10829#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,668 INFO L290 TraceCheckUtils]: 4: Hoare triple {10829#(= 1 ~systemActive~0)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,668 INFO L290 TraceCheckUtils]: 5: Hoare triple {10829#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,668 INFO L290 TraceCheckUtils]: 6: Hoare triple {10829#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,669 INFO L290 TraceCheckUtils]: 7: Hoare triple {10829#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,669 INFO L290 TraceCheckUtils]: 8: Hoare triple {10829#(= 1 ~systemActive~0)} assume !false; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,669 INFO L290 TraceCheckUtils]: 9: Hoare triple {10829#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,670 INFO L290 TraceCheckUtils]: 10: Hoare triple {10829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,670 INFO L290 TraceCheckUtils]: 11: Hoare triple {10829#(= 1 ~systemActive~0)} assume 0 != test_~tmp~5#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,671 INFO L272 TraceCheckUtils]: 12: Hoare triple {10829#(= 1 ~systemActive~0)} call waterRise(); {10878#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:08,671 INFO L290 TraceCheckUtils]: 13: Hoare triple {10878#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10827#true} is VALID [2022-02-20 18:12:08,671 INFO L290 TraceCheckUtils]: 14: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,671 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10827#true} {10829#(= 1 ~systemActive~0)} #244#return; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,672 INFO L290 TraceCheckUtils]: 16: Hoare triple {10829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,672 INFO L290 TraceCheckUtils]: 17: Hoare triple {10829#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2#1); {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,673 INFO L290 TraceCheckUtils]: 18: Hoare triple {10829#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,673 INFO L290 TraceCheckUtils]: 19: Hoare triple {10829#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {10829#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:08,674 INFO L272 TraceCheckUtils]: 20: Hoare triple {10829#(= 1 ~systemActive~0)} call timeShift(); {10879#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:08,674 INFO L290 TraceCheckUtils]: 21: Hoare triple {10879#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L272 TraceCheckUtils]: 22: Hoare triple {10827#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L290 TraceCheckUtils]: 23: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L290 TraceCheckUtils]: 24: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10827#true} {10827#true} #232#return; {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L290 TraceCheckUtils]: 26: Hoare triple {10827#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:08,674 INFO L290 TraceCheckUtils]: 27: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10827#true} is VALID [2022-02-20 18:12:08,675 INFO L290 TraceCheckUtils]: 28: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,675 INFO L290 TraceCheckUtils]: 29: Hoare triple {10827#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {10827#true} is VALID [2022-02-20 18:12:08,675 INFO L290 TraceCheckUtils]: 30: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,675 INFO L272 TraceCheckUtils]: 31: Hoare triple {10827#true} call processEnvironment__wrappee__highWaterSensor(); {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:08,675 INFO L290 TraceCheckUtils]: 32: Hoare triple {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 33: Hoare triple {10827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 34: Hoare triple {10827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 35: Hoare triple {10827#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 36: Hoare triple {10827#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 37: Hoare triple {10827#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10827#true} is VALID [2022-02-20 18:12:08,676 INFO L290 TraceCheckUtils]: 38: Hoare triple {10827#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {10827#true} is VALID [2022-02-20 18:12:08,677 INFO L290 TraceCheckUtils]: 39: Hoare triple {10827#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,677 INFO L290 TraceCheckUtils]: 40: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,677 INFO L290 TraceCheckUtils]: 41: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,678 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #236#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,678 INFO L290 TraceCheckUtils]: 43: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,678 INFO L290 TraceCheckUtils]: 44: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,679 INFO L290 TraceCheckUtils]: 45: Hoare triple {10894#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,679 INFO L290 TraceCheckUtils]: 46: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,679 INFO L290 TraceCheckUtils]: 47: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,680 INFO L290 TraceCheckUtils]: 48: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:08,680 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10829#(= 1 ~systemActive~0)} #248#return; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,681 INFO L290 TraceCheckUtils]: 50: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume !false; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,681 INFO L290 TraceCheckUtils]: 51: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,681 INFO L290 TraceCheckUtils]: 52: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,682 INFO L290 TraceCheckUtils]: 53: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~5#1); {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,682 INFO L290 TraceCheckUtils]: 54: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,682 INFO L290 TraceCheckUtils]: 55: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~2#1); {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,683 INFO L290 TraceCheckUtils]: 56: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,683 INFO L290 TraceCheckUtils]: 57: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,683 INFO L272 TraceCheckUtils]: 58: Hoare triple {10862#(not (= ~pumpRunning~0 0))} call timeShift(); {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,684 INFO L290 TraceCheckUtils]: 59: Hoare triple {10862#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10862#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:08,684 INFO L272 TraceCheckUtils]: 60: Hoare triple {10862#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:08,684 INFO L290 TraceCheckUtils]: 61: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:08,685 INFO L290 TraceCheckUtils]: 62: Hoare triple {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:08,685 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {10896#(= ~pumpRunning~0 |isPumpRunning_#res|)} {10862#(not (= ~pumpRunning~0 0))} #232#return; {10866#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1| 0))} is VALID [2022-02-20 18:12:08,686 INFO L290 TraceCheckUtils]: 64: Hoare triple {10866#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,686 INFO L290 TraceCheckUtils]: 65: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,686 INFO L290 TraceCheckUtils]: 66: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,687 INFO L290 TraceCheckUtils]: 67: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,687 INFO L290 TraceCheckUtils]: 68: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,687 INFO L290 TraceCheckUtils]: 69: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,688 INFO L290 TraceCheckUtils]: 70: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,689 INFO L290 TraceCheckUtils]: 71: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,689 INFO L290 TraceCheckUtils]: 72: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,689 INFO L290 TraceCheckUtils]: 73: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 != processEnvironment_~tmp~3#1); {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,690 INFO L272 TraceCheckUtils]: 74: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__wrappee__highWaterSensor(); {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:08,690 INFO L290 TraceCheckUtils]: 75: Hoare triple {10895#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:08,690 INFO L290 TraceCheckUtils]: 76: Hoare triple {10827#true} assume !(0 == ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:08,690 INFO L272 TraceCheckUtils]: 77: Hoare triple {10827#true} call processEnvironment__wrappee__base(); {10827#true} is VALID [2022-02-20 18:12:08,690 INFO L290 TraceCheckUtils]: 78: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,691 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {10827#true} {10827#true} #254#return; {10827#true} is VALID [2022-02-20 18:12:08,691 INFO L290 TraceCheckUtils]: 80: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,691 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {10827#true} {10867#(not (= ~switchedOnBeforeTS~0 0))} #234#return; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,691 INFO L290 TraceCheckUtils]: 82: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,692 INFO L290 TraceCheckUtils]: 83: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,692 INFO L290 TraceCheckUtils]: 84: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,692 INFO L290 TraceCheckUtils]: 85: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,693 INFO L272 TraceCheckUtils]: 86: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:08,693 INFO L290 TraceCheckUtils]: 87: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:08,693 INFO L290 TraceCheckUtils]: 88: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:08,693 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {10827#true} {10867#(not (= ~switchedOnBeforeTS~0 0))} #238#return; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,694 INFO L290 TraceCheckUtils]: 90: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,694 INFO L290 TraceCheckUtils]: 91: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {10867#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:08,694 INFO L290 TraceCheckUtils]: 92: Hoare triple {10867#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10828#false} is VALID [2022-02-20 18:12:08,694 INFO L290 TraceCheckUtils]: 93: Hoare triple {10828#false} assume !false; {10828#false} is VALID [2022-02-20 18:12:08,695 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:08,695 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:08,695 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1992499428] [2022-02-20 18:12:08,695 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1992499428] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:08,696 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1713247578] [2022-02-20 18:12:08,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:08,696 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:08,696 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:08,703 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:08,734 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:08,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,818 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:08,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:08,862 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:09,363 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {10827#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {10827#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 2: Hoare triple {10827#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10827#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 3: Hoare triple {10827#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {10827#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 4: Hoare triple {10827#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {10827#true} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 5: Hoare triple {10827#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {10827#true} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 6: Hoare triple {10827#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 7: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 8: Hoare triple {10827#true} assume !false; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 9: Hoare triple {10827#true} assume test_~splverifierCounter~0#1 < 4; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 10: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 11: Hoare triple {10827#true} assume 0 != test_~tmp~5#1; {10827#true} is VALID [2022-02-20 18:12:09,366 INFO L272 TraceCheckUtils]: 12: Hoare triple {10827#true} call waterRise(); {10827#true} is VALID [2022-02-20 18:12:09,367 INFO L290 TraceCheckUtils]: 13: Hoare triple {10827#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10827#true} is VALID [2022-02-20 18:12:09,369 INFO L290 TraceCheckUtils]: 14: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10827#true} {10827#true} #244#return; {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L290 TraceCheckUtils]: 16: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L290 TraceCheckUtils]: 17: Hoare triple {10827#true} assume !(0 != test_~tmp___0~2#1); {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L290 TraceCheckUtils]: 18: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L290 TraceCheckUtils]: 19: Hoare triple {10827#true} assume 0 != test_~tmp___2~0#1; {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L272 TraceCheckUtils]: 20: Hoare triple {10827#true} call timeShift(); {10827#true} is VALID [2022-02-20 18:12:09,370 INFO L290 TraceCheckUtils]: 21: Hoare triple {10827#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L272 TraceCheckUtils]: 22: Hoare triple {10827#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L290 TraceCheckUtils]: 23: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L290 TraceCheckUtils]: 24: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10827#true} {10827#true} #232#return; {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L290 TraceCheckUtils]: 26: Hoare triple {10827#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:09,371 INFO L290 TraceCheckUtils]: 27: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 28: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 29: Hoare triple {10827#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 30: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L272 TraceCheckUtils]: 31: Hoare triple {10827#true} call processEnvironment__wrappee__highWaterSensor(); {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 32: Hoare triple {10827#true} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 33: Hoare triple {10827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:09,372 INFO L290 TraceCheckUtils]: 34: Hoare triple {10827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:09,373 INFO L290 TraceCheckUtils]: 35: Hoare triple {10827#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {10827#true} is VALID [2022-02-20 18:12:09,373 INFO L290 TraceCheckUtils]: 36: Hoare triple {10827#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {10827#true} is VALID [2022-02-20 18:12:09,373 INFO L290 TraceCheckUtils]: 37: Hoare triple {10827#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10827#true} is VALID [2022-02-20 18:12:09,373 INFO L290 TraceCheckUtils]: 38: Hoare triple {10827#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {10827#true} is VALID [2022-02-20 18:12:09,374 INFO L290 TraceCheckUtils]: 39: Hoare triple {10827#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,374 INFO L290 TraceCheckUtils]: 40: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,375 INFO L290 TraceCheckUtils]: 41: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,375 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #236#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,375 INFO L290 TraceCheckUtils]: 43: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,376 INFO L290 TraceCheckUtils]: 44: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,376 INFO L290 TraceCheckUtils]: 45: Hoare triple {10894#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,377 INFO L290 TraceCheckUtils]: 46: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,377 INFO L290 TraceCheckUtils]: 47: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,377 INFO L290 TraceCheckUtils]: 48: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,378 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #248#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,378 INFO L290 TraceCheckUtils]: 50: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !false; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,378 INFO L290 TraceCheckUtils]: 51: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,379 INFO L290 TraceCheckUtils]: 52: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,379 INFO L290 TraceCheckUtils]: 53: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,387 INFO L290 TraceCheckUtils]: 54: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,388 INFO L290 TraceCheckUtils]: 55: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,388 INFO L290 TraceCheckUtils]: 56: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,388 INFO L290 TraceCheckUtils]: 57: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,389 INFO L272 TraceCheckUtils]: 58: Hoare triple {10894#(<= 1 ~pumpRunning~0)} call timeShift(); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,389 INFO L290 TraceCheckUtils]: 59: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,390 INFO L272 TraceCheckUtils]: 60: Hoare triple {10894#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,390 INFO L290 TraceCheckUtils]: 61: Hoare triple {10894#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {11085#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:09,391 INFO L290 TraceCheckUtils]: 62: Hoare triple {11085#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {11085#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:09,391 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {11085#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {10894#(<= 1 ~pumpRunning~0)} #232#return; {11092#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1|)} is VALID [2022-02-20 18:12:09,392 INFO L290 TraceCheckUtils]: 64: Hoare triple {11092#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,392 INFO L290 TraceCheckUtils]: 65: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,393 INFO L290 TraceCheckUtils]: 66: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,393 INFO L290 TraceCheckUtils]: 67: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,393 INFO L290 TraceCheckUtils]: 68: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,394 INFO L290 TraceCheckUtils]: 69: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,394 INFO L290 TraceCheckUtils]: 70: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,394 INFO L290 TraceCheckUtils]: 71: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,395 INFO L290 TraceCheckUtils]: 72: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,395 INFO L290 TraceCheckUtils]: 73: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~3#1); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,396 INFO L272 TraceCheckUtils]: 74: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,396 INFO L290 TraceCheckUtils]: 75: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} havoc ~tmp~2#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,396 INFO L290 TraceCheckUtils]: 76: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,397 INFO L272 TraceCheckUtils]: 77: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,397 INFO L290 TraceCheckUtils]: 78: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,397 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {11096#(<= 1 ~switchedOnBeforeTS~0)} {11096#(<= 1 ~switchedOnBeforeTS~0)} #254#return; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,398 INFO L290 TraceCheckUtils]: 80: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,403 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {11096#(<= 1 ~switchedOnBeforeTS~0)} {11096#(<= 1 ~switchedOnBeforeTS~0)} #234#return; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,404 INFO L290 TraceCheckUtils]: 82: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,404 INFO L290 TraceCheckUtils]: 83: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,405 INFO L290 TraceCheckUtils]: 84: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,405 INFO L290 TraceCheckUtils]: 85: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,405 INFO L272 TraceCheckUtils]: 86: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,406 INFO L290 TraceCheckUtils]: 87: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,406 INFO L290 TraceCheckUtils]: 88: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,406 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {11096#(<= 1 ~switchedOnBeforeTS~0)} {11096#(<= 1 ~switchedOnBeforeTS~0)} #238#return; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,407 INFO L290 TraceCheckUtils]: 90: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,407 INFO L290 TraceCheckUtils]: 91: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,408 INFO L290 TraceCheckUtils]: 92: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10828#false} is VALID [2022-02-20 18:12:09,408 INFO L290 TraceCheckUtils]: 93: Hoare triple {10828#false} assume !false; {10828#false} is VALID [2022-02-20 18:12:09,408 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:09,408 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:09,923 INFO L290 TraceCheckUtils]: 93: Hoare triple {10828#false} assume !false; {10828#false} is VALID [2022-02-20 18:12:09,924 INFO L290 TraceCheckUtils]: 92: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10828#false} is VALID [2022-02-20 18:12:09,925 INFO L290 TraceCheckUtils]: 91: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,925 INFO L290 TraceCheckUtils]: 90: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,925 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {10827#true} {11096#(<= 1 ~switchedOnBeforeTS~0)} #238#return; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,926 INFO L290 TraceCheckUtils]: 88: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,926 INFO L290 TraceCheckUtils]: 87: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:09,926 INFO L272 TraceCheckUtils]: 86: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:09,926 INFO L290 TraceCheckUtils]: 85: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,927 INFO L290 TraceCheckUtils]: 84: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,927 INFO L290 TraceCheckUtils]: 83: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,928 INFO L290 TraceCheckUtils]: 82: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,928 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {10827#true} {11096#(<= 1 ~switchedOnBeforeTS~0)} #234#return; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,928 INFO L290 TraceCheckUtils]: 80: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {10827#true} {10827#true} #254#return; {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L290 TraceCheckUtils]: 78: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L272 TraceCheckUtils]: 77: Hoare triple {10827#true} call processEnvironment__wrappee__base(); {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L290 TraceCheckUtils]: 76: Hoare triple {10827#true} assume !(0 == ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L290 TraceCheckUtils]: 75: Hoare triple {10827#true} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:09,929 INFO L272 TraceCheckUtils]: 74: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {10827#true} is VALID [2022-02-20 18:12:09,930 INFO L290 TraceCheckUtils]: 73: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~3#1); {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,930 INFO L290 TraceCheckUtils]: 72: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,931 INFO L290 TraceCheckUtils]: 71: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,931 INFO L290 TraceCheckUtils]: 70: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,931 INFO L290 TraceCheckUtils]: 69: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,932 INFO L290 TraceCheckUtils]: 68: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,932 INFO L290 TraceCheckUtils]: 67: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,933 INFO L290 TraceCheckUtils]: 66: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,933 INFO L290 TraceCheckUtils]: 65: Hoare triple {11096#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,934 INFO L290 TraceCheckUtils]: 64: Hoare triple {11092#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {11096#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,934 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {11277#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {10894#(<= 1 ~pumpRunning~0)} #232#return; {11092#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret9#1|)} is VALID [2022-02-20 18:12:09,935 INFO L290 TraceCheckUtils]: 62: Hoare triple {11277#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {11277#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:09,935 INFO L290 TraceCheckUtils]: 61: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {11277#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:09,935 INFO L272 TraceCheckUtils]: 60: Hoare triple {10894#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:09,936 INFO L290 TraceCheckUtils]: 59: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,936 INFO L272 TraceCheckUtils]: 58: Hoare triple {10894#(<= 1 ~pumpRunning~0)} call timeShift(); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,937 INFO L290 TraceCheckUtils]: 57: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,937 INFO L290 TraceCheckUtils]: 56: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,937 INFO L290 TraceCheckUtils]: 55: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,938 INFO L290 TraceCheckUtils]: 54: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,938 INFO L290 TraceCheckUtils]: 53: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~5#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,939 INFO L290 TraceCheckUtils]: 52: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,939 INFO L290 TraceCheckUtils]: 51: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,939 INFO L290 TraceCheckUtils]: 50: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !false; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,940 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #248#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,940 INFO L290 TraceCheckUtils]: 48: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,941 INFO L290 TraceCheckUtils]: 47: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,941 INFO L290 TraceCheckUtils]: 46: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,941 INFO L290 TraceCheckUtils]: 45: Hoare triple {10894#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,942 INFO L290 TraceCheckUtils]: 44: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,942 INFO L290 TraceCheckUtils]: 43: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,942 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {10894#(<= 1 ~pumpRunning~0)} {10827#true} #236#return; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,943 INFO L290 TraceCheckUtils]: 41: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,943 INFO L290 TraceCheckUtils]: 40: Hoare triple {10894#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,944 INFO L290 TraceCheckUtils]: 39: Hoare triple {10827#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10894#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,944 INFO L290 TraceCheckUtils]: 38: Hoare triple {10827#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {10827#true} is VALID [2022-02-20 18:12:09,944 INFO L290 TraceCheckUtils]: 37: Hoare triple {10827#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {10827#true} is VALID [2022-02-20 18:12:09,944 INFO L290 TraceCheckUtils]: 36: Hoare triple {10827#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {10827#true} is VALID [2022-02-20 18:12:09,944 INFO L290 TraceCheckUtils]: 35: Hoare triple {10827#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {10827#true} is VALID [2022-02-20 18:12:09,945 INFO L290 TraceCheckUtils]: 34: Hoare triple {10827#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:09,945 INFO L290 TraceCheckUtils]: 33: Hoare triple {10827#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {10827#true} is VALID [2022-02-20 18:12:09,945 INFO L290 TraceCheckUtils]: 32: Hoare triple {10827#true} havoc ~tmp~2#1; {10827#true} is VALID [2022-02-20 18:12:09,945 INFO L272 TraceCheckUtils]: 31: Hoare triple {10827#true} call processEnvironment__wrappee__highWaterSensor(); {10827#true} is VALID [2022-02-20 18:12:09,945 INFO L290 TraceCheckUtils]: 30: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:09,946 INFO L290 TraceCheckUtils]: 29: Hoare triple {10827#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {10827#true} is VALID [2022-02-20 18:12:09,946 INFO L290 TraceCheckUtils]: 28: Hoare triple {10827#true} assume !(0 != ~pumpRunning~0); {10827#true} is VALID [2022-02-20 18:12:09,946 INFO L290 TraceCheckUtils]: 27: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10827#true} is VALID [2022-02-20 18:12:09,946 INFO L290 TraceCheckUtils]: 26: Hoare triple {10827#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:09,946 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10827#true} {10827#true} #232#return; {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L290 TraceCheckUtils]: 24: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L290 TraceCheckUtils]: 23: Hoare triple {10827#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L272 TraceCheckUtils]: 22: Hoare triple {10827#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L290 TraceCheckUtils]: 21: Hoare triple {10827#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L272 TraceCheckUtils]: 20: Hoare triple {10827#true} call timeShift(); {10827#true} is VALID [2022-02-20 18:12:09,947 INFO L290 TraceCheckUtils]: 19: Hoare triple {10827#true} assume 0 != test_~tmp___2~0#1; {10827#true} is VALID [2022-02-20 18:12:09,948 INFO L290 TraceCheckUtils]: 18: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {10827#true} is VALID [2022-02-20 18:12:09,948 INFO L290 TraceCheckUtils]: 17: Hoare triple {10827#true} assume !(0 != test_~tmp___0~2#1); {10827#true} is VALID [2022-02-20 18:12:09,948 INFO L290 TraceCheckUtils]: 16: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {10827#true} is VALID [2022-02-20 18:12:09,948 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10827#true} {10827#true} #244#return; {10827#true} is VALID [2022-02-20 18:12:09,948 INFO L290 TraceCheckUtils]: 14: Hoare triple {10827#true} assume true; {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L290 TraceCheckUtils]: 13: Hoare triple {10827#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L272 TraceCheckUtils]: 12: Hoare triple {10827#true} call waterRise(); {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L290 TraceCheckUtils]: 11: Hoare triple {10827#true} assume 0 != test_~tmp~5#1; {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L290 TraceCheckUtils]: 10: Hoare triple {10827#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L290 TraceCheckUtils]: 9: Hoare triple {10827#true} assume test_~splverifierCounter~0#1 < 4; {10827#true} is VALID [2022-02-20 18:12:09,949 INFO L290 TraceCheckUtils]: 8: Hoare triple {10827#true} assume !false; {10827#true} is VALID [2022-02-20 18:12:09,950 INFO L290 TraceCheckUtils]: 7: Hoare triple {10827#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10827#true} is VALID [2022-02-20 18:12:09,950 INFO L290 TraceCheckUtils]: 6: Hoare triple {10827#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10827#true} is VALID [2022-02-20 18:12:09,950 INFO L290 TraceCheckUtils]: 5: Hoare triple {10827#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {10827#true} is VALID [2022-02-20 18:12:09,950 INFO L290 TraceCheckUtils]: 4: Hoare triple {10827#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {10827#true} is VALID [2022-02-20 18:12:09,950 INFO L290 TraceCheckUtils]: 3: Hoare triple {10827#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {10827#true} is VALID [2022-02-20 18:12:09,951 INFO L290 TraceCheckUtils]: 2: Hoare triple {10827#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10827#true} is VALID [2022-02-20 18:12:09,951 INFO L290 TraceCheckUtils]: 1: Hoare triple {10827#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {10827#true} is VALID [2022-02-20 18:12:09,951 INFO L290 TraceCheckUtils]: 0: Hoare triple {10827#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {10827#true} is VALID [2022-02-20 18:12:09,951 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:09,952 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1713247578] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:09,952 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:09,952 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-02-20 18:12:09,952 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555326031] [2022-02-20 18:12:09,953 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:09,953 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2022-02-20 18:12:09,954 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:09,955 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:10,071 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 166 edges. 166 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:10,071 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-02-20 18:12:10,072 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:10,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-02-20 18:12:10,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:10,073 INFO L87 Difference]: Start difference. First operand 507 states and 613 transitions. Second operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:13,594 INFO L93 Difference]: Finished difference Result 1114 states and 1382 transitions. [2022-02-20 18:12:13,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-02-20 18:12:13,594 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2022-02-20 18:12:13,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:13,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 416 transitions. [2022-02-20 18:12:13,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,606 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 416 transitions. [2022-02-20 18:12:13,606 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 32 states and 416 transitions. [2022-02-20 18:12:13,952 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 416 edges. 416 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:13,983 INFO L225 Difference]: With dead ends: 1114 [2022-02-20 18:12:13,983 INFO L226 Difference]: Without dead ends: 663 [2022-02-20 18:12:13,986 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 211 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=438, Invalid=1454, Unknown=0, NotChecked=0, Total=1892 [2022-02-20 18:12:13,988 INFO L933 BasicCegarLoop]: 208 mSDtfsCounter, 427 mSDsluCounter, 962 mSDsCounter, 0 mSdLazyCounter, 856 mSolverCounterSat, 208 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 430 SdHoareTripleChecker+Valid, 1170 SdHoareTripleChecker+Invalid, 1064 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 208 IncrementalHoareTripleChecker+Valid, 856 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:13,988 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [430 Valid, 1170 Invalid, 1064 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [208 Valid, 856 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-02-20 18:12:13,990 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 663 states. [2022-02-20 18:12:14,284 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 663 to 576. [2022-02-20 18:12:14,285 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:14,287 INFO L82 GeneralOperation]: Start isEquivalent. First operand 663 states. Second operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) [2022-02-20 18:12:14,288 INFO L74 IsIncluded]: Start isIncluded. First operand 663 states. Second operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) [2022-02-20 18:12:14,290 INFO L87 Difference]: Start difference. First operand 663 states. Second operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) [2022-02-20 18:12:14,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:14,318 INFO L93 Difference]: Finished difference Result 663 states and 811 transitions. [2022-02-20 18:12:14,318 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 811 transitions. [2022-02-20 18:12:14,320 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:14,320 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:14,322 INFO L74 IsIncluded]: Start isIncluded. First operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) Second operand 663 states. [2022-02-20 18:12:14,323 INFO L87 Difference]: Start difference. First operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) Second operand 663 states. [2022-02-20 18:12:14,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:14,356 INFO L93 Difference]: Finished difference Result 663 states and 811 transitions. [2022-02-20 18:12:14,356 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 811 transitions. [2022-02-20 18:12:14,358 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:14,358 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:14,358 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:14,359 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:14,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 576 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 72 states have call successors, (72), 62 states have call predecessors, (72), 68 states have return successors, (96), 69 states have call predecessors, (96), 72 states have call successors, (96) [2022-02-20 18:12:14,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 576 states to 576 states and 691 transitions. [2022-02-20 18:12:14,392 INFO L78 Accepts]: Start accepts. Automaton has 576 states and 691 transitions. Word has length 94 [2022-02-20 18:12:14,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:14,393 INFO L470 AbstractCegarLoop]: Abstraction has 576 states and 691 transitions. [2022-02-20 18:12:14,393 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:14,393 INFO L276 IsEmpty]: Start isEmpty. Operand 576 states and 691 transitions. [2022-02-20 18:12:14,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-02-20 18:12:14,401 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:14,401 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:14,430 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-02-20 18:12:14,623 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:14,623 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:14,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:14,624 INFO L85 PathProgramCache]: Analyzing trace with hash 1424558119, now seen corresponding path program 1 times [2022-02-20 18:12:14,624 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:14,624 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1851760264] [2022-02-20 18:12:14,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:14,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:14,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:14,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,725 INFO L290 TraceCheckUtils]: 0: Hoare triple {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15211#true} is VALID [2022-02-20 18:12:14,725 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,726 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #244#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:14,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,747 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,747 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,747 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:14,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,756 INFO L290 TraceCheckUtils]: 0: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,756 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,756 INFO L290 TraceCheckUtils]: 2: Hoare triple {15211#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 4: Hoare triple {15211#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 6: Hoare triple {15211#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 7: Hoare triple {15211#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15211#true} is VALID [2022-02-20 18:12:14,757 INFO L290 TraceCheckUtils]: 8: Hoare triple {15211#true} assume { :end_inline_activatePump } true; {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L290 TraceCheckUtils]: 9: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15211#true} {15211#true} #236#return; {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L290 TraceCheckUtils]: 0: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L272 TraceCheckUtils]: 1: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L290 TraceCheckUtils]: 2: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,758 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L290 TraceCheckUtils]: 6: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L290 TraceCheckUtils]: 7: Hoare triple {15211#true} assume !(0 != ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L290 TraceCheckUtils]: 8: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,759 INFO L290 TraceCheckUtils]: 9: Hoare triple {15211#true} assume !(0 != ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,760 INFO L272 TraceCheckUtils]: 10: Hoare triple {15211#true} call processEnvironment__wrappee__highWaterSensor(); {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,760 INFO L290 TraceCheckUtils]: 11: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,760 INFO L290 TraceCheckUtils]: 12: Hoare triple {15211#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,760 INFO L290 TraceCheckUtils]: 13: Hoare triple {15211#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 14: Hoare triple {15211#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 15: Hoare triple {15211#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 16: Hoare triple {15211#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 17: Hoare triple {15211#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 18: Hoare triple {15211#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 19: Hoare triple {15211#true} assume { :end_inline_activatePump } true; {15211#true} is VALID [2022-02-20 18:12:14,761 INFO L290 TraceCheckUtils]: 20: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {15211#true} {15211#true} #236#return; {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L290 TraceCheckUtils]: 22: Hoare triple {15211#true} assume { :end_inline_processEnvironment } true; {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L290 TraceCheckUtils]: 23: Hoare triple {15211#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L290 TraceCheckUtils]: 24: Hoare triple {15211#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L290 TraceCheckUtils]: 25: Hoare triple {15211#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15211#true} is VALID [2022-02-20 18:12:14,762 INFO L290 TraceCheckUtils]: 26: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15211#true} is VALID [2022-02-20 18:12:14,763 INFO L290 TraceCheckUtils]: 27: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,763 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:12:14,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,779 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,779 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:14,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:14,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,785 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,786 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {15211#true} {15211#true} #254#return; {15211#true} is VALID [2022-02-20 18:12:14,786 INFO L290 TraceCheckUtils]: 0: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,786 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume !(0 == ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,786 INFO L272 TraceCheckUtils]: 2: Hoare triple {15211#true} call processEnvironment__wrappee__base(); {15211#true} is VALID [2022-02-20 18:12:14,786 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15211#true} {15211#true} #254#return; {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {15211#true} {15211#true} #234#return; {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L290 TraceCheckUtils]: 0: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L272 TraceCheckUtils]: 1: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,787 INFO L290 TraceCheckUtils]: 2: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L290 TraceCheckUtils]: 6: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L290 TraceCheckUtils]: 7: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,788 INFO L290 TraceCheckUtils]: 8: Hoare triple {15211#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 9: Hoare triple {15211#true} assume { :end_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 10: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 11: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 12: Hoare triple {15211#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 13: Hoare triple {15211#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {15211#true} is VALID [2022-02-20 18:12:14,789 INFO L290 TraceCheckUtils]: 14: Hoare triple {15211#true} assume !(0 != processEnvironment_~tmp~3#1); {15211#true} is VALID [2022-02-20 18:12:14,790 INFO L272 TraceCheckUtils]: 15: Hoare triple {15211#true} call processEnvironment__wrappee__highWaterSensor(); {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,790 INFO L290 TraceCheckUtils]: 16: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,790 INFO L290 TraceCheckUtils]: 17: Hoare triple {15211#true} assume !(0 == ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,790 INFO L272 TraceCheckUtils]: 18: Hoare triple {15211#true} call processEnvironment__wrappee__base(); {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L290 TraceCheckUtils]: 19: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {15211#true} {15211#true} #254#return; {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L290 TraceCheckUtils]: 21: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {15211#true} {15211#true} #234#return; {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L290 TraceCheckUtils]: 23: Hoare triple {15211#true} assume { :end_inline_processEnvironment } true; {15211#true} is VALID [2022-02-20 18:12:14,791 INFO L290 TraceCheckUtils]: 24: Hoare triple {15211#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15211#true} is VALID [2022-02-20 18:12:14,792 INFO L290 TraceCheckUtils]: 25: Hoare triple {15211#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15211#true} is VALID [2022-02-20 18:12:14,792 INFO L290 TraceCheckUtils]: 26: Hoare triple {15211#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15211#true} is VALID [2022-02-20 18:12:14,792 INFO L290 TraceCheckUtils]: 27: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15211#true} is VALID [2022-02-20 18:12:14,792 INFO L290 TraceCheckUtils]: 28: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,793 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-02-20 18:12:14,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,836 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,836 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,836 INFO L290 TraceCheckUtils]: 0: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,836 INFO L272 TraceCheckUtils]: 1: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,836 INFO L290 TraceCheckUtils]: 2: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 6: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 7: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 8: Hoare triple {15211#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 9: Hoare triple {15211#true} assume { :end_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,837 INFO L290 TraceCheckUtils]: 10: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,838 INFO L290 TraceCheckUtils]: 11: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {15351#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,838 INFO L290 TraceCheckUtils]: 12: Hoare triple {15351#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {15352#(= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)} is VALID [2022-02-20 18:12:14,838 INFO L290 TraceCheckUtils]: 13: Hoare triple {15352#(= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {15353#(= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,839 INFO L290 TraceCheckUtils]: 14: Hoare triple {15353#(= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,839 INFO L290 TraceCheckUtils]: 15: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_deactivatePump } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,842 INFO L290 TraceCheckUtils]: 16: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_processEnvironment } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,842 INFO L290 TraceCheckUtils]: 17: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,843 INFO L290 TraceCheckUtils]: 18: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,843 INFO L290 TraceCheckUtils]: 19: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,843 INFO L290 TraceCheckUtils]: 20: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,844 INFO L290 TraceCheckUtils]: 21: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,844 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {15354#(not (= ~methaneLevelCritical~0 0))} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15212#false} is VALID [2022-02-20 18:12:14,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-02-20 18:12:14,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,857 INFO L290 TraceCheckUtils]: 0: Hoare triple {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {15211#true} is VALID [2022-02-20 18:12:14,857 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,858 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15212#false} #244#return; {15212#false} is VALID [2022-02-20 18:12:14,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-02-20 18:12:14,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,864 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,864 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,864 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15212#false} #232#return; {15212#false} is VALID [2022-02-20 18:12:14,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-02-20 18:12:14,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,877 INFO L290 TraceCheckUtils]: 0: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,877 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,877 INFO L290 TraceCheckUtils]: 2: Hoare triple {15211#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 3: Hoare triple {15211#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 4: Hoare triple {15211#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {15211#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 6: Hoare triple {15211#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 7: Hoare triple {15211#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15211#true} is VALID [2022-02-20 18:12:14,878 INFO L290 TraceCheckUtils]: 8: Hoare triple {15211#true} assume { :end_inline_activatePump } true; {15211#true} is VALID [2022-02-20 18:12:14,879 INFO L290 TraceCheckUtils]: 9: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,879 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {15211#true} {15212#false} #236#return; {15212#false} is VALID [2022-02-20 18:12:14,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-02-20 18:12:14,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {15211#true} {15212#false} #238#return; {15212#false} is VALID [2022-02-20 18:12:14,889 INFO L290 TraceCheckUtils]: 0: Hoare triple {15211#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,889 INFO L290 TraceCheckUtils]: 1: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,889 INFO L290 TraceCheckUtils]: 2: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,890 INFO L290 TraceCheckUtils]: 3: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,890 INFO L290 TraceCheckUtils]: 4: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,891 INFO L290 TraceCheckUtils]: 5: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,891 INFO L290 TraceCheckUtils]: 6: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,891 INFO L290 TraceCheckUtils]: 7: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,892 INFO L290 TraceCheckUtils]: 8: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !false; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,892 INFO L290 TraceCheckUtils]: 9: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,892 INFO L290 TraceCheckUtils]: 10: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,893 INFO L290 TraceCheckUtils]: 11: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~5#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,893 INFO L272 TraceCheckUtils]: 12: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} call waterRise(); {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:14,894 INFO L290 TraceCheckUtils]: 13: Hoare triple {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15211#true} is VALID [2022-02-20 18:12:14,894 INFO L290 TraceCheckUtils]: 14: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,894 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #244#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,895 INFO L290 TraceCheckUtils]: 16: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,895 INFO L290 TraceCheckUtils]: 17: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,895 INFO L290 TraceCheckUtils]: 18: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,896 INFO L290 TraceCheckUtils]: 19: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,896 INFO L272 TraceCheckUtils]: 20: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} call timeShift(); {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,897 INFO L290 TraceCheckUtils]: 21: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,897 INFO L272 TraceCheckUtils]: 22: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,897 INFO L290 TraceCheckUtils]: 23: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,897 INFO L290 TraceCheckUtils]: 24: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,897 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,897 INFO L290 TraceCheckUtils]: 26: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,898 INFO L290 TraceCheckUtils]: 27: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,898 INFO L290 TraceCheckUtils]: 28: Hoare triple {15211#true} assume !(0 != ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,898 INFO L290 TraceCheckUtils]: 29: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,898 INFO L290 TraceCheckUtils]: 30: Hoare triple {15211#true} assume !(0 != ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,899 INFO L272 TraceCheckUtils]: 31: Hoare triple {15211#true} call processEnvironment__wrappee__highWaterSensor(); {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,899 INFO L290 TraceCheckUtils]: 32: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,899 INFO L290 TraceCheckUtils]: 33: Hoare triple {15211#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,899 INFO L290 TraceCheckUtils]: 34: Hoare triple {15211#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,899 INFO L290 TraceCheckUtils]: 35: Hoare triple {15211#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 36: Hoare triple {15211#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 37: Hoare triple {15211#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 38: Hoare triple {15211#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 39: Hoare triple {15211#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 40: Hoare triple {15211#true} assume { :end_inline_activatePump } true; {15211#true} is VALID [2022-02-20 18:12:14,900 INFO L290 TraceCheckUtils]: 41: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {15211#true} {15211#true} #236#return; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 43: Hoare triple {15211#true} assume { :end_inline_processEnvironment } true; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 44: Hoare triple {15211#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 45: Hoare triple {15211#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 46: Hoare triple {15211#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 47: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15211#true} is VALID [2022-02-20 18:12:14,901 INFO L290 TraceCheckUtils]: 48: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,902 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,902 INFO L290 TraceCheckUtils]: 50: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !false; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,903 INFO L290 TraceCheckUtils]: 51: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,903 INFO L290 TraceCheckUtils]: 52: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,903 INFO L290 TraceCheckUtils]: 53: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~5#1); {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,904 INFO L290 TraceCheckUtils]: 54: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,904 INFO L290 TraceCheckUtils]: 55: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,904 INFO L290 TraceCheckUtils]: 56: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,905 INFO L290 TraceCheckUtils]: 57: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,905 INFO L272 TraceCheckUtils]: 58: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} call timeShift(); {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,906 INFO L290 TraceCheckUtils]: 59: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,906 INFO L272 TraceCheckUtils]: 60: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,906 INFO L290 TraceCheckUtils]: 61: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,906 INFO L290 TraceCheckUtils]: 62: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,906 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 64: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 65: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 66: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 67: Hoare triple {15211#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 68: Hoare triple {15211#true} assume { :end_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,914 INFO L290 TraceCheckUtils]: 69: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,915 INFO L290 TraceCheckUtils]: 70: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {15211#true} is VALID [2022-02-20 18:12:14,915 INFO L290 TraceCheckUtils]: 71: Hoare triple {15211#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {15211#true} is VALID [2022-02-20 18:12:14,915 INFO L290 TraceCheckUtils]: 72: Hoare triple {15211#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {15211#true} is VALID [2022-02-20 18:12:14,915 INFO L290 TraceCheckUtils]: 73: Hoare triple {15211#true} assume !(0 != processEnvironment_~tmp~3#1); {15211#true} is VALID [2022-02-20 18:12:14,916 INFO L272 TraceCheckUtils]: 74: Hoare triple {15211#true} call processEnvironment__wrappee__highWaterSensor(); {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,916 INFO L290 TraceCheckUtils]: 75: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,916 INFO L290 TraceCheckUtils]: 76: Hoare triple {15211#true} assume !(0 == ~pumpRunning~0); {15211#true} is VALID [2022-02-20 18:12:14,916 INFO L272 TraceCheckUtils]: 77: Hoare triple {15211#true} call processEnvironment__wrappee__base(); {15211#true} is VALID [2022-02-20 18:12:14,916 INFO L290 TraceCheckUtils]: 78: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {15211#true} {15211#true} #254#return; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L290 TraceCheckUtils]: 80: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {15211#true} {15211#true} #234#return; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L290 TraceCheckUtils]: 82: Hoare triple {15211#true} assume { :end_inline_processEnvironment } true; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L290 TraceCheckUtils]: 83: Hoare triple {15211#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15211#true} is VALID [2022-02-20 18:12:14,917 INFO L290 TraceCheckUtils]: 84: Hoare triple {15211#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15211#true} is VALID [2022-02-20 18:12:14,918 INFO L290 TraceCheckUtils]: 85: Hoare triple {15211#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15211#true} is VALID [2022-02-20 18:12:14,918 INFO L290 TraceCheckUtils]: 86: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15211#true} is VALID [2022-02-20 18:12:14,918 INFO L290 TraceCheckUtils]: 87: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,918 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {15211#true} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,919 INFO L290 TraceCheckUtils]: 89: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !false; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,919 INFO L290 TraceCheckUtils]: 90: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,919 INFO L290 TraceCheckUtils]: 91: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,920 INFO L290 TraceCheckUtils]: 92: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~5#1); {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,920 INFO L290 TraceCheckUtils]: 93: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,921 INFO L290 TraceCheckUtils]: 94: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~2#1); {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,921 INFO L290 TraceCheckUtils]: 95: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,921 INFO L290 TraceCheckUtils]: 96: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {15213#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,922 INFO L272 TraceCheckUtils]: 97: Hoare triple {15213#(= ~methaneLevelCritical~0 0)} call timeShift(); {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,922 INFO L290 TraceCheckUtils]: 98: Hoare triple {15320#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,922 INFO L272 TraceCheckUtils]: 99: Hoare triple {15211#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,922 INFO L290 TraceCheckUtils]: 100: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L290 TraceCheckUtils]: 101: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {15211#true} {15211#true} #232#return; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L290 TraceCheckUtils]: 103: Hoare triple {15211#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L290 TraceCheckUtils]: 104: Hoare triple {15211#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L290 TraceCheckUtils]: 105: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,923 INFO L290 TraceCheckUtils]: 106: Hoare triple {15211#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15211#true} is VALID [2022-02-20 18:12:14,924 INFO L290 TraceCheckUtils]: 107: Hoare triple {15211#true} assume { :end_inline_lowerWaterLevel } true; {15211#true} is VALID [2022-02-20 18:12:14,924 INFO L290 TraceCheckUtils]: 108: Hoare triple {15211#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15211#true} is VALID [2022-02-20 18:12:14,924 INFO L290 TraceCheckUtils]: 109: Hoare triple {15211#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {15351#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,925 INFO L290 TraceCheckUtils]: 110: Hoare triple {15351#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {15352#(= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)} is VALID [2022-02-20 18:12:14,925 INFO L290 TraceCheckUtils]: 111: Hoare triple {15352#(= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {15353#(= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,926 INFO L290 TraceCheckUtils]: 112: Hoare triple {15353#(= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,926 INFO L290 TraceCheckUtils]: 113: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_deactivatePump } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,926 INFO L290 TraceCheckUtils]: 114: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_processEnvironment } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,927 INFO L290 TraceCheckUtils]: 115: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,927 INFO L290 TraceCheckUtils]: 116: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,927 INFO L290 TraceCheckUtils]: 117: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,928 INFO L290 TraceCheckUtils]: 118: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,928 INFO L290 TraceCheckUtils]: 119: Hoare triple {15354#(not (= ~methaneLevelCritical~0 0))} assume true; {15354#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,929 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {15354#(not (= ~methaneLevelCritical~0 0))} {15213#(= ~methaneLevelCritical~0 0)} #248#return; {15212#false} is VALID [2022-02-20 18:12:14,929 INFO L290 TraceCheckUtils]: 121: Hoare triple {15212#false} assume !false; {15212#false} is VALID [2022-02-20 18:12:14,929 INFO L290 TraceCheckUtils]: 122: Hoare triple {15212#false} assume test_~splverifierCounter~0#1 < 4; {15212#false} is VALID [2022-02-20 18:12:14,929 INFO L290 TraceCheckUtils]: 123: Hoare triple {15212#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {15212#false} is VALID [2022-02-20 18:12:14,929 INFO L290 TraceCheckUtils]: 124: Hoare triple {15212#false} assume 0 != test_~tmp~5#1; {15212#false} is VALID [2022-02-20 18:12:14,929 INFO L272 TraceCheckUtils]: 125: Hoare triple {15212#false} call waterRise(); {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:14,930 INFO L290 TraceCheckUtils]: 126: Hoare triple {15319#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {15211#true} is VALID [2022-02-20 18:12:14,930 INFO L290 TraceCheckUtils]: 127: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,930 INFO L284 TraceCheckUtils]: 128: Hoare quadruple {15211#true} {15212#false} #244#return; {15212#false} is VALID [2022-02-20 18:12:14,930 INFO L290 TraceCheckUtils]: 129: Hoare triple {15212#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {15212#false} is VALID [2022-02-20 18:12:14,930 INFO L290 TraceCheckUtils]: 130: Hoare triple {15212#false} assume !(0 != test_~tmp___0~2#1); {15212#false} is VALID [2022-02-20 18:12:14,930 INFO L290 TraceCheckUtils]: 131: Hoare triple {15212#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {15212#false} is VALID [2022-02-20 18:12:14,931 INFO L290 TraceCheckUtils]: 132: Hoare triple {15212#false} assume 0 != test_~tmp___2~0#1; {15212#false} is VALID [2022-02-20 18:12:14,931 INFO L272 TraceCheckUtils]: 133: Hoare triple {15212#false} call timeShift(); {15212#false} is VALID [2022-02-20 18:12:14,931 INFO L290 TraceCheckUtils]: 134: Hoare triple {15212#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15212#false} is VALID [2022-02-20 18:12:14,931 INFO L272 TraceCheckUtils]: 135: Hoare triple {15212#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,931 INFO L290 TraceCheckUtils]: 136: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,931 INFO L290 TraceCheckUtils]: 137: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,932 INFO L284 TraceCheckUtils]: 138: Hoare quadruple {15211#true} {15212#false} #232#return; {15212#false} is VALID [2022-02-20 18:12:14,932 INFO L290 TraceCheckUtils]: 139: Hoare triple {15212#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {15212#false} is VALID [2022-02-20 18:12:14,932 INFO L290 TraceCheckUtils]: 140: Hoare triple {15212#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {15212#false} is VALID [2022-02-20 18:12:14,932 INFO L290 TraceCheckUtils]: 141: Hoare triple {15212#false} assume !(0 != ~pumpRunning~0); {15212#false} is VALID [2022-02-20 18:12:14,932 INFO L290 TraceCheckUtils]: 142: Hoare triple {15212#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {15212#false} is VALID [2022-02-20 18:12:14,932 INFO L290 TraceCheckUtils]: 143: Hoare triple {15212#false} assume !(0 != ~pumpRunning~0); {15212#false} is VALID [2022-02-20 18:12:14,933 INFO L272 TraceCheckUtils]: 144: Hoare triple {15212#false} call processEnvironment__wrappee__highWaterSensor(); {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,933 INFO L290 TraceCheckUtils]: 145: Hoare triple {15335#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {15211#true} is VALID [2022-02-20 18:12:14,933 INFO L290 TraceCheckUtils]: 146: Hoare triple {15211#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,933 INFO L290 TraceCheckUtils]: 147: Hoare triple {15211#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {15211#true} is VALID [2022-02-20 18:12:14,933 INFO L290 TraceCheckUtils]: 148: Hoare triple {15211#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 149: Hoare triple {15211#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 150: Hoare triple {15211#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 151: Hoare triple {15211#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 152: Hoare triple {15211#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 153: Hoare triple {15211#true} assume { :end_inline_activatePump } true; {15211#true} is VALID [2022-02-20 18:12:14,934 INFO L290 TraceCheckUtils]: 154: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,935 INFO L284 TraceCheckUtils]: 155: Hoare quadruple {15211#true} {15212#false} #236#return; {15212#false} is VALID [2022-02-20 18:12:14,935 INFO L290 TraceCheckUtils]: 156: Hoare triple {15212#false} assume { :end_inline_processEnvironment } true; {15212#false} is VALID [2022-02-20 18:12:14,935 INFO L290 TraceCheckUtils]: 157: Hoare triple {15212#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {15212#false} is VALID [2022-02-20 18:12:14,935 INFO L290 TraceCheckUtils]: 158: Hoare triple {15212#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {15212#false} is VALID [2022-02-20 18:12:14,935 INFO L290 TraceCheckUtils]: 159: Hoare triple {15212#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {15212#false} is VALID [2022-02-20 18:12:14,935 INFO L272 TraceCheckUtils]: 160: Hoare triple {15212#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {15211#true} is VALID [2022-02-20 18:12:14,936 INFO L290 TraceCheckUtils]: 161: Hoare triple {15211#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {15211#true} is VALID [2022-02-20 18:12:14,936 INFO L290 TraceCheckUtils]: 162: Hoare triple {15211#true} assume true; {15211#true} is VALID [2022-02-20 18:12:14,936 INFO L284 TraceCheckUtils]: 163: Hoare quadruple {15211#true} {15212#false} #238#return; {15212#false} is VALID [2022-02-20 18:12:14,936 INFO L290 TraceCheckUtils]: 164: Hoare triple {15212#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {15212#false} is VALID [2022-02-20 18:12:14,936 INFO L290 TraceCheckUtils]: 165: Hoare triple {15212#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {15212#false} is VALID [2022-02-20 18:12:14,936 INFO L290 TraceCheckUtils]: 166: Hoare triple {15212#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {15212#false} is VALID [2022-02-20 18:12:14,937 INFO L290 TraceCheckUtils]: 167: Hoare triple {15212#false} assume !false; {15212#false} is VALID [2022-02-20 18:12:14,937 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 79 proven. 0 refuted. 0 times theorem prover too weak. 109 trivial. 0 not checked. [2022-02-20 18:12:14,937 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:14,938 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1851760264] [2022-02-20 18:12:14,938 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1851760264] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:14,938 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:14,938 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:14,938 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587180151] [2022-02-20 18:12:14,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:14,939 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 168 [2022-02-20 18:12:14,940 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:14,940 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:12:15,011 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:15,012 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:15,012 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:15,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:15,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:15,013 INFO L87 Difference]: Start difference. First operand 576 states and 691 transitions. Second operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:12:17,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:17,516 INFO L93 Difference]: Finished difference Result 1567 states and 1910 transitions. [2022-02-20 18:12:17,517 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-02-20 18:12:17,517 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 168 [2022-02-20 18:12:17,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:17,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:12:17,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 356 transitions. [2022-02-20 18:12:17,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:12:17,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 356 transitions. [2022-02-20 18:12:17,527 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 26 states and 356 transitions. [2022-02-20 18:12:17,826 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 356 edges. 356 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:17,899 INFO L225 Difference]: With dead ends: 1567 [2022-02-20 18:12:17,899 INFO L226 Difference]: Without dead ends: 999 [2022-02-20 18:12:17,901 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=211, Invalid=781, Unknown=0, NotChecked=0, Total=992 [2022-02-20 18:12:17,902 INFO L933 BasicCegarLoop]: 175 mSDtfsCounter, 373 mSDsluCounter, 556 mSDsCounter, 0 mSdLazyCounter, 641 mSolverCounterSat, 118 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 377 SdHoareTripleChecker+Valid, 731 SdHoareTripleChecker+Invalid, 759 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 118 IncrementalHoareTripleChecker+Valid, 641 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:17,903 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [377 Valid, 731 Invalid, 759 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [118 Valid, 641 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-02-20 18:12:17,904 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 999 states. [2022-02-20 18:12:18,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 999 to 997. [2022-02-20 18:12:18,409 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:18,412 INFO L82 GeneralOperation]: Start isEquivalent. First operand 999 states. Second operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) [2022-02-20 18:12:18,414 INFO L74 IsIncluded]: Start isIncluded. First operand 999 states. Second operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) [2022-02-20 18:12:18,417 INFO L87 Difference]: Start difference. First operand 999 states. Second operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) [2022-02-20 18:12:18,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,471 INFO L93 Difference]: Finished difference Result 999 states and 1171 transitions. [2022-02-20 18:12:18,471 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1171 transitions. [2022-02-20 18:12:18,474 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,474 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,478 INFO L74 IsIncluded]: Start isIncluded. First operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) Second operand 999 states. [2022-02-20 18:12:18,480 INFO L87 Difference]: Start difference. First operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) Second operand 999 states. [2022-02-20 18:12:18,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:18,536 INFO L93 Difference]: Finished difference Result 999 states and 1171 transitions. [2022-02-20 18:12:18,536 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1171 transitions. [2022-02-20 18:12:18,539 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:18,539 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:18,539 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:18,539 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:18,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 997 states, 755 states have (on average 1.1682119205298014) internal successors, (882), 800 states have internal predecessors, (882), 126 states have call successors, (126), 111 states have call predecessors, (126), 115 states have return successors, (162), 116 states have call predecessors, (162), 126 states have call successors, (162) [2022-02-20 18:12:18,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 997 states to 997 states and 1170 transitions. [2022-02-20 18:12:18,624 INFO L78 Accepts]: Start accepts. Automaton has 997 states and 1170 transitions. Word has length 168 [2022-02-20 18:12:18,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:18,624 INFO L470 AbstractCegarLoop]: Abstraction has 997 states and 1170 transitions. [2022-02-20 18:12:18,625 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 3 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2022-02-20 18:12:18,625 INFO L276 IsEmpty]: Start isEmpty. Operand 997 states and 1170 transitions. [2022-02-20 18:12:18,628 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 173 [2022-02-20 18:12:18,628 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:18,628 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:18,629 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-02-20 18:12:18,629 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:18,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:18,629 INFO L85 PathProgramCache]: Analyzing trace with hash 1054333355, now seen corresponding path program 1 times [2022-02-20 18:12:18,630 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:18,630 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2010904573] [2022-02-20 18:12:18,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:18,630 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:18,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:18,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,722 INFO L290 TraceCheckUtils]: 0: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20971#true} is VALID [2022-02-20 18:12:18,722 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,722 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20971#true} #244#return; {20971#true} is VALID [2022-02-20 18:12:18,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:18,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:18,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,738 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,738 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,739 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:18,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,748 INFO L290 TraceCheckUtils]: 0: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 4: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:18,749 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20971#true} {20971#true} #236#return; {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L290 TraceCheckUtils]: 0: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L272 TraceCheckUtils]: 1: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,750 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume !(0 != ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,751 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,752 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume !(0 != ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,752 INFO L272 TraceCheckUtils]: 10: Hoare triple {20971#true} call processEnvironment__wrappee__highWaterSensor(); {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:18,752 INFO L290 TraceCheckUtils]: 11: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,752 INFO L290 TraceCheckUtils]: 12: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 13: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 14: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 15: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 16: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 17: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:18,753 INFO L290 TraceCheckUtils]: 18: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 19: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 20: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {20971#true} {20971#true} #236#return; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 22: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 23: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 24: Hoare triple {20971#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20971#true} is VALID [2022-02-20 18:12:18,754 INFO L290 TraceCheckUtils]: 25: Hoare triple {20971#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20971#true} is VALID [2022-02-20 18:12:18,755 INFO L290 TraceCheckUtils]: 26: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20971#true} is VALID [2022-02-20 18:12:18,755 INFO L290 TraceCheckUtils]: 27: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,755 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {20971#true} {20971#true} #248#return; {20971#true} is VALID [2022-02-20 18:12:18,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:12:18,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:18,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,767 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,767 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:18,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:18,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,773 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume !(0 == ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L272 TraceCheckUtils]: 2: Hoare triple {20971#true} call processEnvironment__wrappee__base(); {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,774 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {20971#true} {20971#true} #234#return; {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L290 TraceCheckUtils]: 0: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L272 TraceCheckUtils]: 1: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,775 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,776 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,780 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,780 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume { :end_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 10: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 11: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20971#true} is VALID [2022-02-20 18:12:18,781 INFO L290 TraceCheckUtils]: 12: Hoare triple {20971#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20971#true} is VALID [2022-02-20 18:12:18,782 INFO L290 TraceCheckUtils]: 13: Hoare triple {20971#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20971#true} is VALID [2022-02-20 18:12:18,782 INFO L290 TraceCheckUtils]: 14: Hoare triple {20971#true} assume !(0 != processEnvironment_~tmp~3#1); {20971#true} is VALID [2022-02-20 18:12:18,782 INFO L272 TraceCheckUtils]: 15: Hoare triple {20971#true} call processEnvironment__wrappee__highWaterSensor(); {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:18,783 INFO L290 TraceCheckUtils]: 16: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,783 INFO L290 TraceCheckUtils]: 17: Hoare triple {20971#true} assume !(0 == ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,783 INFO L272 TraceCheckUtils]: 18: Hoare triple {20971#true} call processEnvironment__wrappee__base(); {20971#true} is VALID [2022-02-20 18:12:18,783 INFO L290 TraceCheckUtils]: 19: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,783 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:18,783 INFO L290 TraceCheckUtils]: 21: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {20971#true} {20971#true} #234#return; {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L290 TraceCheckUtils]: 23: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L290 TraceCheckUtils]: 24: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L290 TraceCheckUtils]: 25: Hoare triple {20971#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L290 TraceCheckUtils]: 26: Hoare triple {20971#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20971#true} is VALID [2022-02-20 18:12:18,784 INFO L290 TraceCheckUtils]: 27: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20971#true} is VALID [2022-02-20 18:12:18,785 INFO L290 TraceCheckUtils]: 28: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,785 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {20971#true} {20971#true} #248#return; {20971#true} is VALID [2022-02-20 18:12:18,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-02-20 18:12:18,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,792 INFO L290 TraceCheckUtils]: 0: Hoare triple {21113#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,793 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,793 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20971#true} #246#return; {20971#true} is VALID [2022-02-20 18:12:18,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-02-20 18:12:18,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:18,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,864 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,865 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,865 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,865 INFO L290 TraceCheckUtils]: 0: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,865 INFO L272 TraceCheckUtils]: 1: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,865 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20971#true} is VALID [2022-02-20 18:12:18,866 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume { :end_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 10: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 11: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 12: Hoare triple {20971#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 13: Hoare triple {20971#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 14: Hoare triple {20971#true} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {20971#true} is VALID [2022-02-20 18:12:18,867 INFO L290 TraceCheckUtils]: 15: Hoare triple {20971#true} assume { :end_inline_deactivatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,868 INFO L290 TraceCheckUtils]: 16: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,868 INFO L290 TraceCheckUtils]: 17: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21117#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:18,869 INFO L290 TraceCheckUtils]: 18: Hoare triple {21117#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21118#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:18,869 INFO L290 TraceCheckUtils]: 19: Hoare triple {21118#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,870 INFO L290 TraceCheckUtils]: 20: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,870 INFO L290 TraceCheckUtils]: 21: Hoare triple {21061#(= 2 ~waterLevel~0)} assume true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,871 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {21061#(= 2 ~waterLevel~0)} {20971#true} #248#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-02-20 18:12:18,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,876 INFO L290 TraceCheckUtils]: 0: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,876 INFO L290 TraceCheckUtils]: 1: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,876 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} {21061#(= 2 ~waterLevel~0)} #244#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 139 [2022-02-20 18:12:18,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,880 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {21061#(= 2 ~waterLevel~0)} #232#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2022-02-20 18:12:18,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,886 INFO L290 TraceCheckUtils]: 0: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,886 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,886 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,886 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 4: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,887 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,888 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20971#true} {21061#(= 2 ~waterLevel~0)} #236#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2022-02-20 18:12:18,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:18,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,891 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20971#true} {20972#false} #238#return; {20972#false} is VALID [2022-02-20 18:12:18,891 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {20971#true} is VALID [2022-02-20 18:12:18,891 INFO L290 TraceCheckUtils]: 1: Hoare triple {20971#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {20971#true} is VALID [2022-02-20 18:12:18,891 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 3: Hoare triple {20971#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 4: Hoare triple {20971#true} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 5: Hoare triple {20971#true} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 6: Hoare triple {20971#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 7: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 8: Hoare triple {20971#true} assume !false; {20971#true} is VALID [2022-02-20 18:12:18,892 INFO L290 TraceCheckUtils]: 9: Hoare triple {20971#true} assume test_~splverifierCounter~0#1 < 4; {20971#true} is VALID [2022-02-20 18:12:18,893 INFO L290 TraceCheckUtils]: 10: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20971#true} is VALID [2022-02-20 18:12:18,893 INFO L290 TraceCheckUtils]: 11: Hoare triple {20971#true} assume 0 != test_~tmp~5#1; {20971#true} is VALID [2022-02-20 18:12:18,893 INFO L272 TraceCheckUtils]: 12: Hoare triple {20971#true} call waterRise(); {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,893 INFO L290 TraceCheckUtils]: 13: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20971#true} is VALID [2022-02-20 18:12:18,893 INFO L290 TraceCheckUtils]: 14: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,894 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20971#true} {20971#true} #244#return; {20971#true} is VALID [2022-02-20 18:12:18,894 INFO L290 TraceCheckUtils]: 16: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20971#true} is VALID [2022-02-20 18:12:18,894 INFO L290 TraceCheckUtils]: 17: Hoare triple {20971#true} assume !(0 != test_~tmp___0~2#1); {20971#true} is VALID [2022-02-20 18:12:18,894 INFO L290 TraceCheckUtils]: 18: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20971#true} is VALID [2022-02-20 18:12:18,894 INFO L290 TraceCheckUtils]: 19: Hoare triple {20971#true} assume 0 != test_~tmp___2~0#1; {20971#true} is VALID [2022-02-20 18:12:18,895 INFO L272 TraceCheckUtils]: 20: Hoare triple {20971#true} call timeShift(); {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:18,895 INFO L290 TraceCheckUtils]: 21: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,895 INFO L272 TraceCheckUtils]: 22: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,895 INFO L290 TraceCheckUtils]: 23: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,895 INFO L290 TraceCheckUtils]: 24: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,895 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,896 INFO L290 TraceCheckUtils]: 26: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,896 INFO L290 TraceCheckUtils]: 27: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,896 INFO L290 TraceCheckUtils]: 28: Hoare triple {20971#true} assume !(0 != ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,896 INFO L290 TraceCheckUtils]: 29: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,896 INFO L290 TraceCheckUtils]: 30: Hoare triple {20971#true} assume !(0 != ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,897 INFO L272 TraceCheckUtils]: 31: Hoare triple {20971#true} call processEnvironment__wrappee__highWaterSensor(); {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:18,897 INFO L290 TraceCheckUtils]: 32: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,897 INFO L290 TraceCheckUtils]: 33: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,897 INFO L290 TraceCheckUtils]: 34: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,897 INFO L290 TraceCheckUtils]: 35: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:18,897 INFO L290 TraceCheckUtils]: 36: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 37: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 38: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 39: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 40: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 41: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20971#true} {20971#true} #236#return; {20971#true} is VALID [2022-02-20 18:12:18,898 INFO L290 TraceCheckUtils]: 43: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L290 TraceCheckUtils]: 44: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L290 TraceCheckUtils]: 45: Hoare triple {20971#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L290 TraceCheckUtils]: 46: Hoare triple {20971#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L290 TraceCheckUtils]: 47: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L290 TraceCheckUtils]: 48: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,899 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {20971#true} {20971#true} #248#return; {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 50: Hoare triple {20971#true} assume !false; {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 51: Hoare triple {20971#true} assume test_~splverifierCounter~0#1 < 4; {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 52: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 53: Hoare triple {20971#true} assume !(0 != test_~tmp~5#1); {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 54: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 55: Hoare triple {20971#true} assume !(0 != test_~tmp___0~2#1); {20971#true} is VALID [2022-02-20 18:12:18,900 INFO L290 TraceCheckUtils]: 56: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20971#true} is VALID [2022-02-20 18:12:18,901 INFO L290 TraceCheckUtils]: 57: Hoare triple {20971#true} assume 0 != test_~tmp___2~0#1; {20971#true} is VALID [2022-02-20 18:12:18,901 INFO L272 TraceCheckUtils]: 58: Hoare triple {20971#true} call timeShift(); {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:18,901 INFO L290 TraceCheckUtils]: 59: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L272 TraceCheckUtils]: 60: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L290 TraceCheckUtils]: 61: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L290 TraceCheckUtils]: 62: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L290 TraceCheckUtils]: 64: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L290 TraceCheckUtils]: 65: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,902 INFO L290 TraceCheckUtils]: 66: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 67: Hoare triple {20971#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 68: Hoare triple {20971#true} assume { :end_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 69: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 70: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 71: Hoare triple {20971#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20971#true} is VALID [2022-02-20 18:12:18,903 INFO L290 TraceCheckUtils]: 72: Hoare triple {20971#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20971#true} is VALID [2022-02-20 18:12:18,904 INFO L290 TraceCheckUtils]: 73: Hoare triple {20971#true} assume !(0 != processEnvironment_~tmp~3#1); {20971#true} is VALID [2022-02-20 18:12:18,904 INFO L272 TraceCheckUtils]: 74: Hoare triple {20971#true} call processEnvironment__wrappee__highWaterSensor(); {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:18,904 INFO L290 TraceCheckUtils]: 75: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,904 INFO L290 TraceCheckUtils]: 76: Hoare triple {20971#true} assume !(0 == ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:18,904 INFO L272 TraceCheckUtils]: 77: Hoare triple {20971#true} call processEnvironment__wrappee__base(); {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L290 TraceCheckUtils]: 78: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L290 TraceCheckUtils]: 80: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20971#true} {20971#true} #234#return; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L290 TraceCheckUtils]: 82: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L290 TraceCheckUtils]: 83: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20971#true} is VALID [2022-02-20 18:12:18,905 INFO L290 TraceCheckUtils]: 84: Hoare triple {20971#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L290 TraceCheckUtils]: 85: Hoare triple {20971#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L290 TraceCheckUtils]: 86: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L290 TraceCheckUtils]: 87: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {20971#true} {20971#true} #248#return; {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L290 TraceCheckUtils]: 89: Hoare triple {20971#true} assume !false; {20971#true} is VALID [2022-02-20 18:12:18,906 INFO L290 TraceCheckUtils]: 90: Hoare triple {20971#true} assume test_~splverifierCounter~0#1 < 4; {20971#true} is VALID [2022-02-20 18:12:18,907 INFO L290 TraceCheckUtils]: 91: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20971#true} is VALID [2022-02-20 18:12:18,907 INFO L290 TraceCheckUtils]: 92: Hoare triple {20971#true} assume !(0 != test_~tmp~5#1); {20971#true} is VALID [2022-02-20 18:12:18,907 INFO L290 TraceCheckUtils]: 93: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20971#true} is VALID [2022-02-20 18:12:18,907 INFO L290 TraceCheckUtils]: 94: Hoare triple {20971#true} assume 0 != test_~tmp___0~2#1; {20971#true} is VALID [2022-02-20 18:12:18,907 INFO L272 TraceCheckUtils]: 95: Hoare triple {20971#true} call changeMethaneLevel(); {21113#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,908 INFO L290 TraceCheckUtils]: 96: Hoare triple {21113#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,908 INFO L290 TraceCheckUtils]: 97: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,908 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {20971#true} {20971#true} #246#return; {20971#true} is VALID [2022-02-20 18:12:18,908 INFO L290 TraceCheckUtils]: 99: Hoare triple {20971#true} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20971#true} is VALID [2022-02-20 18:12:18,908 INFO L290 TraceCheckUtils]: 100: Hoare triple {20971#true} assume 0 != test_~tmp___2~0#1; {20971#true} is VALID [2022-02-20 18:12:18,909 INFO L272 TraceCheckUtils]: 101: Hoare triple {20971#true} call timeShift(); {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:18,909 INFO L290 TraceCheckUtils]: 102: Hoare triple {21085#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,909 INFO L272 TraceCheckUtils]: 103: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,909 INFO L290 TraceCheckUtils]: 104: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,909 INFO L290 TraceCheckUtils]: 105: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 107: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 108: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 109: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 110: Hoare triple {20971#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 111: Hoare triple {20971#true} assume { :end_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:18,910 INFO L290 TraceCheckUtils]: 112: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 113: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 114: Hoare triple {20971#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 115: Hoare triple {20971#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 116: Hoare triple {20971#true} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 117: Hoare triple {20971#true} assume { :end_inline_deactivatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,911 INFO L290 TraceCheckUtils]: 118: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:18,912 INFO L290 TraceCheckUtils]: 119: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21117#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:18,913 INFO L290 TraceCheckUtils]: 120: Hoare triple {21117#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21118#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:18,913 INFO L290 TraceCheckUtils]: 121: Hoare triple {21118#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,913 INFO L290 TraceCheckUtils]: 122: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,914 INFO L290 TraceCheckUtils]: 123: Hoare triple {21061#(= 2 ~waterLevel~0)} assume true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,914 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {21061#(= 2 ~waterLevel~0)} {20971#true} #248#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,915 INFO L290 TraceCheckUtils]: 125: Hoare triple {21061#(= 2 ~waterLevel~0)} assume !false; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,915 INFO L290 TraceCheckUtils]: 126: Hoare triple {21061#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,915 INFO L290 TraceCheckUtils]: 127: Hoare triple {21061#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,916 INFO L290 TraceCheckUtils]: 128: Hoare triple {21061#(= 2 ~waterLevel~0)} assume 0 != test_~tmp~5#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,916 INFO L272 TraceCheckUtils]: 129: Hoare triple {21061#(= 2 ~waterLevel~0)} call waterRise(); {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,916 INFO L290 TraceCheckUtils]: 130: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,917 INFO L290 TraceCheckUtils]: 131: Hoare triple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:18,917 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {21084#(= |old(~waterLevel~0)| ~waterLevel~0)} {21061#(= 2 ~waterLevel~0)} #244#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,918 INFO L290 TraceCheckUtils]: 133: Hoare triple {21061#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,918 INFO L290 TraceCheckUtils]: 134: Hoare triple {21061#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2#1); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,918 INFO L290 TraceCheckUtils]: 135: Hoare triple {21061#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,919 INFO L290 TraceCheckUtils]: 136: Hoare triple {21061#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,923 INFO L272 TraceCheckUtils]: 137: Hoare triple {21061#(= 2 ~waterLevel~0)} call timeShift(); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,924 INFO L290 TraceCheckUtils]: 138: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,924 INFO L272 TraceCheckUtils]: 139: Hoare triple {21061#(= 2 ~waterLevel~0)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,924 INFO L290 TraceCheckUtils]: 140: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,924 INFO L290 TraceCheckUtils]: 141: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,936 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {20971#true} {21061#(= 2 ~waterLevel~0)} #232#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,936 INFO L290 TraceCheckUtils]: 143: Hoare triple {21061#(= 2 ~waterLevel~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,937 INFO L290 TraceCheckUtils]: 144: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,937 INFO L290 TraceCheckUtils]: 145: Hoare triple {21061#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,938 INFO L290 TraceCheckUtils]: 146: Hoare triple {21061#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,938 INFO L290 TraceCheckUtils]: 147: Hoare triple {21061#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,939 INFO L272 TraceCheckUtils]: 148: Hoare triple {21061#(= 2 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:18,939 INFO L290 TraceCheckUtils]: 149: Hoare triple {21100#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:18,939 INFO L290 TraceCheckUtils]: 150: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,939 INFO L290 TraceCheckUtils]: 151: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:18,939 INFO L290 TraceCheckUtils]: 152: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:18,939 INFO L290 TraceCheckUtils]: 153: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:18,940 INFO L290 TraceCheckUtils]: 154: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:18,940 INFO L290 TraceCheckUtils]: 155: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:18,940 INFO L290 TraceCheckUtils]: 156: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:18,940 INFO L290 TraceCheckUtils]: 157: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:18,940 INFO L290 TraceCheckUtils]: 158: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,941 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {20971#true} {21061#(= 2 ~waterLevel~0)} #236#return; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,941 INFO L290 TraceCheckUtils]: 160: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {21061#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:18,942 INFO L290 TraceCheckUtils]: 161: Hoare triple {21061#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21079#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:18,942 INFO L290 TraceCheckUtils]: 162: Hoare triple {21079#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21080#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)} is VALID [2022-02-20 18:12:18,942 INFO L290 TraceCheckUtils]: 163: Hoare triple {21080#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {20972#false} is VALID [2022-02-20 18:12:18,943 INFO L272 TraceCheckUtils]: 164: Hoare triple {20972#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:18,943 INFO L290 TraceCheckUtils]: 165: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:18,943 INFO L290 TraceCheckUtils]: 166: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:18,943 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {20971#true} {20972#false} #238#return; {20972#false} is VALID [2022-02-20 18:12:18,943 INFO L290 TraceCheckUtils]: 168: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {20972#false} is VALID [2022-02-20 18:12:18,943 INFO L290 TraceCheckUtils]: 169: Hoare triple {20972#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {20972#false} is VALID [2022-02-20 18:12:18,944 INFO L290 TraceCheckUtils]: 170: Hoare triple {20972#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20972#false} is VALID [2022-02-20 18:12:18,944 INFO L290 TraceCheckUtils]: 171: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:18,944 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2022-02-20 18:12:18,944 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:18,945 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2010904573] [2022-02-20 18:12:18,945 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2010904573] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:18,945 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1523370805] [2022-02-20 18:12:18,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:18,945 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:18,946 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:18,947 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:18,948 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:12:19,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,092 INFO L263 TraceCheckSpWp]: Trace formula consists of 672 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:19,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:19,140 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:19,858 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,858 INFO L290 TraceCheckUtils]: 1: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,859 INFO L290 TraceCheckUtils]: 2: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,859 INFO L290 TraceCheckUtils]: 3: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,859 INFO L290 TraceCheckUtils]: 4: Hoare triple {21122#(<= ~waterLevel~0 1)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,860 INFO L290 TraceCheckUtils]: 5: Hoare triple {21122#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,860 INFO L290 TraceCheckUtils]: 6: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,860 INFO L290 TraceCheckUtils]: 7: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,860 INFO L290 TraceCheckUtils]: 8: Hoare triple {21122#(<= ~waterLevel~0 1)} assume !false; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,861 INFO L290 TraceCheckUtils]: 9: Hoare triple {21122#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,861 INFO L290 TraceCheckUtils]: 10: Hoare triple {21122#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,861 INFO L290 TraceCheckUtils]: 11: Hoare triple {21122#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:19,862 INFO L272 TraceCheckUtils]: 12: Hoare triple {21122#(<= ~waterLevel~0 1)} call waterRise(); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,862 INFO L290 TraceCheckUtils]: 13: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21163#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:19,862 INFO L290 TraceCheckUtils]: 14: Hoare triple {21163#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} assume true; {21163#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:19,863 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {21163#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} {21122#(<= ~waterLevel~0 1)} #244#return; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,863 INFO L290 TraceCheckUtils]: 16: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,864 INFO L290 TraceCheckUtils]: 17: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,864 INFO L290 TraceCheckUtils]: 18: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,864 INFO L290 TraceCheckUtils]: 19: Hoare triple {21170#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,865 INFO L272 TraceCheckUtils]: 20: Hoare triple {21170#(<= ~waterLevel~0 2)} call timeShift(); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,865 INFO L290 TraceCheckUtils]: 21: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,865 INFO L272 TraceCheckUtils]: 22: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:19,865 INFO L290 TraceCheckUtils]: 23: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:19,865 INFO L290 TraceCheckUtils]: 24: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:19,865 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20971#true} {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #232#return; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,866 INFO L290 TraceCheckUtils]: 26: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,871 INFO L290 TraceCheckUtils]: 27: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,871 INFO L290 TraceCheckUtils]: 28: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,871 INFO L290 TraceCheckUtils]: 29: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 30: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,872 INFO L272 TraceCheckUtils]: 31: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 32: Hoare triple {20971#true} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 33: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 34: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 35: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 36: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 37: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 38: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:19,872 INFO L290 TraceCheckUtils]: 39: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:19,873 INFO L290 TraceCheckUtils]: 40: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:19,873 INFO L290 TraceCheckUtils]: 41: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:19,873 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20971#true} {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #236#return; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,873 INFO L290 TraceCheckUtils]: 43: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,874 INFO L290 TraceCheckUtils]: 44: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,883 INFO L290 TraceCheckUtils]: 45: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,884 INFO L290 TraceCheckUtils]: 46: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,884 INFO L290 TraceCheckUtils]: 47: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,885 INFO L290 TraceCheckUtils]: 48: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,885 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} {21170#(<= ~waterLevel~0 2)} #248#return; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,886 INFO L290 TraceCheckUtils]: 50: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !false; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,887 INFO L290 TraceCheckUtils]: 51: Hoare triple {21170#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,887 INFO L290 TraceCheckUtils]: 52: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,887 INFO L290 TraceCheckUtils]: 53: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,888 INFO L290 TraceCheckUtils]: 54: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,888 INFO L290 TraceCheckUtils]: 55: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,888 INFO L290 TraceCheckUtils]: 56: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,889 INFO L290 TraceCheckUtils]: 57: Hoare triple {21170#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:19,889 INFO L272 TraceCheckUtils]: 58: Hoare triple {21170#(<= ~waterLevel~0 2)} call timeShift(); {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,890 INFO L290 TraceCheckUtils]: 59: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,890 INFO L272 TraceCheckUtils]: 60: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:19,890 INFO L290 TraceCheckUtils]: 61: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:19,890 INFO L290 TraceCheckUtils]: 62: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:19,891 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {20971#true} {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #232#return; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,891 INFO L290 TraceCheckUtils]: 64: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,892 INFO L290 TraceCheckUtils]: 65: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,892 INFO L290 TraceCheckUtils]: 66: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,893 INFO L290 TraceCheckUtils]: 67: Hoare triple {21159#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,893 INFO L290 TraceCheckUtils]: 68: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_lowerWaterLevel } true; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,893 INFO L290 TraceCheckUtils]: 69: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,894 INFO L290 TraceCheckUtils]: 70: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,894 INFO L290 TraceCheckUtils]: 71: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,895 INFO L290 TraceCheckUtils]: 72: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,895 INFO L290 TraceCheckUtils]: 73: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume !(0 != processEnvironment_~tmp~3#1); {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,895 INFO L272 TraceCheckUtils]: 74: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {20971#true} is VALID [2022-02-20 18:12:19,895 INFO L290 TraceCheckUtils]: 75: Hoare triple {20971#true} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:19,896 INFO L290 TraceCheckUtils]: 76: Hoare triple {20971#true} assume !(0 == ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:19,896 INFO L272 TraceCheckUtils]: 77: Hoare triple {20971#true} call processEnvironment__wrappee__base(); {20971#true} is VALID [2022-02-20 18:12:19,896 INFO L290 TraceCheckUtils]: 78: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:19,896 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:19,896 INFO L290 TraceCheckUtils]: 80: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:19,898 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20971#true} {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} #234#return; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,898 INFO L290 TraceCheckUtils]: 82: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:19,899 INFO L290 TraceCheckUtils]: 83: Hoare triple {21327#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21376#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:19,899 INFO L290 TraceCheckUtils]: 84: Hoare triple {21376#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21380#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0))} is VALID [2022-02-20 18:12:19,900 INFO L290 TraceCheckUtils]: 85: Hoare triple {21380#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:19,900 INFO L290 TraceCheckUtils]: 86: Hoare triple {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:19,901 INFO L290 TraceCheckUtils]: 87: Hoare triple {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume true; {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:19,901 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {21384#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} {21170#(<= ~waterLevel~0 2)} #248#return; {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 89: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 90: Hoare triple {20972#false} assume test_~splverifierCounter~0#1 < 4; {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 91: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 92: Hoare triple {20972#false} assume !(0 != test_~tmp~5#1); {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 93: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20972#false} is VALID [2022-02-20 18:12:19,902 INFO L290 TraceCheckUtils]: 94: Hoare triple {20972#false} assume 0 != test_~tmp___0~2#1; {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L272 TraceCheckUtils]: 95: Hoare triple {20972#false} call changeMethaneLevel(); {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L290 TraceCheckUtils]: 96: Hoare triple {20972#false} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L290 TraceCheckUtils]: 97: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {20972#false} {20972#false} #246#return; {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L290 TraceCheckUtils]: 99: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20972#false} is VALID [2022-02-20 18:12:19,903 INFO L290 TraceCheckUtils]: 100: Hoare triple {20972#false} assume 0 != test_~tmp___2~0#1; {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L272 TraceCheckUtils]: 101: Hoare triple {20972#false} call timeShift(); {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L290 TraceCheckUtils]: 102: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L272 TraceCheckUtils]: 103: Hoare triple {20972#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L290 TraceCheckUtils]: 104: Hoare triple {20972#false} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L290 TraceCheckUtils]: 105: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {20972#false} {20972#false} #232#return; {20972#false} is VALID [2022-02-20 18:12:19,904 INFO L290 TraceCheckUtils]: 107: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 108: Hoare triple {20972#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 109: Hoare triple {20972#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 110: Hoare triple {20972#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 111: Hoare triple {20972#false} assume { :end_inline_lowerWaterLevel } true; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 112: Hoare triple {20972#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20972#false} is VALID [2022-02-20 18:12:19,905 INFO L290 TraceCheckUtils]: 113: Hoare triple {20972#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 114: Hoare triple {20972#false} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 115: Hoare triple {20972#false} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 116: Hoare triple {20972#false} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 117: Hoare triple {20972#false} assume { :end_inline_deactivatePump } true; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 118: Hoare triple {20972#false} assume { :end_inline_processEnvironment } true; {20972#false} is VALID [2022-02-20 18:12:19,906 INFO L290 TraceCheckUtils]: 119: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 120: Hoare triple {20972#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 121: Hoare triple {20972#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 122: Hoare triple {20972#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 123: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {20972#false} {20972#false} #248#return; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 125: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:19,907 INFO L290 TraceCheckUtils]: 126: Hoare triple {20972#false} assume test_~splverifierCounter~0#1 < 4; {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L290 TraceCheckUtils]: 127: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L290 TraceCheckUtils]: 128: Hoare triple {20972#false} assume 0 != test_~tmp~5#1; {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L272 TraceCheckUtils]: 129: Hoare triple {20972#false} call waterRise(); {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L290 TraceCheckUtils]: 130: Hoare triple {20972#false} assume !(~waterLevel~0 < 2); {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L290 TraceCheckUtils]: 131: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,908 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {20972#false} {20972#false} #244#return; {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L290 TraceCheckUtils]: 133: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L290 TraceCheckUtils]: 134: Hoare triple {20972#false} assume !(0 != test_~tmp___0~2#1); {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L290 TraceCheckUtils]: 135: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L290 TraceCheckUtils]: 136: Hoare triple {20972#false} assume 0 != test_~tmp___2~0#1; {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L272 TraceCheckUtils]: 137: Hoare triple {20972#false} call timeShift(); {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L290 TraceCheckUtils]: 138: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:19,909 INFO L272 TraceCheckUtils]: 139: Hoare triple {20972#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L290 TraceCheckUtils]: 140: Hoare triple {20972#false} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L290 TraceCheckUtils]: 141: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {20972#false} {20972#false} #232#return; {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L290 TraceCheckUtils]: 143: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L290 TraceCheckUtils]: 144: Hoare triple {20972#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20972#false} is VALID [2022-02-20 18:12:19,910 INFO L290 TraceCheckUtils]: 145: Hoare triple {20972#false} assume !(0 != ~pumpRunning~0); {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L290 TraceCheckUtils]: 146: Hoare triple {20972#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L290 TraceCheckUtils]: 147: Hoare triple {20972#false} assume !(0 != ~pumpRunning~0); {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L272 TraceCheckUtils]: 148: Hoare triple {20972#false} call processEnvironment__wrappee__highWaterSensor(); {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L290 TraceCheckUtils]: 149: Hoare triple {20972#false} havoc ~tmp~2#1; {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L290 TraceCheckUtils]: 150: Hoare triple {20972#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20972#false} is VALID [2022-02-20 18:12:19,911 INFO L290 TraceCheckUtils]: 151: Hoare triple {20972#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 152: Hoare triple {20972#false} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 153: Hoare triple {20972#false} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 154: Hoare triple {20972#false} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 155: Hoare triple {20972#false} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 156: Hoare triple {20972#false} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20972#false} is VALID [2022-02-20 18:12:19,912 INFO L290 TraceCheckUtils]: 157: Hoare triple {20972#false} assume { :end_inline_activatePump } true; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L290 TraceCheckUtils]: 158: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {20972#false} {20972#false} #236#return; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L290 TraceCheckUtils]: 160: Hoare triple {20972#false} assume { :end_inline_processEnvironment } true; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L290 TraceCheckUtils]: 161: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L290 TraceCheckUtils]: 162: Hoare triple {20972#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L290 TraceCheckUtils]: 163: Hoare triple {20972#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {20972#false} is VALID [2022-02-20 18:12:19,913 INFO L272 TraceCheckUtils]: 164: Hoare triple {20972#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L290 TraceCheckUtils]: 165: Hoare triple {20972#false} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L290 TraceCheckUtils]: 166: Hoare triple {20972#false} assume true; {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {20972#false} {20972#false} #238#return; {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L290 TraceCheckUtils]: 168: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L290 TraceCheckUtils]: 169: Hoare triple {20972#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {20972#false} is VALID [2022-02-20 18:12:19,914 INFO L290 TraceCheckUtils]: 170: Hoare triple {20972#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20972#false} is VALID [2022-02-20 18:12:19,915 INFO L290 TraceCheckUtils]: 171: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:19,915 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 138 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-02-20 18:12:19,916 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:21,223 INFO L290 TraceCheckUtils]: 171: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:21,223 INFO L290 TraceCheckUtils]: 170: Hoare triple {20972#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20972#false} is VALID [2022-02-20 18:12:21,223 INFO L290 TraceCheckUtils]: 169: Hoare triple {20972#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~0#1; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 168: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret11#1 && __utac_acc__Specification5_spec__3_#t~ret11#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~0#1 := __utac_acc__Specification5_spec__3_#t~ret11#1;havoc __utac_acc__Specification5_spec__3_#t~ret11#1; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L284 TraceCheckUtils]: 167: Hoare quadruple {20971#true} {20972#false} #238#return; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 166: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 165: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:21,224 INFO L272 TraceCheckUtils]: 164: Hoare triple {20972#false} call __utac_acc__Specification5_spec__3_#t~ret11#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 163: Hoare triple {20972#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~0#1; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 162: Hoare triple {20972#false} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 161: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L290 TraceCheckUtils]: 160: Hoare triple {20972#false} assume { :end_inline_processEnvironment } true; {20972#false} is VALID [2022-02-20 18:12:21,224 INFO L284 TraceCheckUtils]: 159: Hoare quadruple {20971#true} {20972#false} #236#return; {20972#false} is VALID [2022-02-20 18:12:21,225 INFO L290 TraceCheckUtils]: 158: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,225 INFO L290 TraceCheckUtils]: 157: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:21,225 INFO L290 TraceCheckUtils]: 156: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 155: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 154: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 153: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 152: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 151: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 150: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 149: Hoare triple {20971#true} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L272 TraceCheckUtils]: 148: Hoare triple {20972#false} call processEnvironment__wrappee__highWaterSensor(); {20971#true} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 147: Hoare triple {20972#false} assume !(0 != ~pumpRunning~0); {20972#false} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 146: Hoare triple {20972#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20972#false} is VALID [2022-02-20 18:12:21,226 INFO L290 TraceCheckUtils]: 145: Hoare triple {20972#false} assume !(0 != ~pumpRunning~0); {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 144: Hoare triple {20972#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 143: Hoare triple {20972#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L284 TraceCheckUtils]: 142: Hoare quadruple {20971#true} {20972#false} #232#return; {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 141: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 140: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:21,227 INFO L272 TraceCheckUtils]: 139: Hoare triple {20972#false} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 138: Hoare triple {20972#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L272 TraceCheckUtils]: 137: Hoare triple {20972#false} call timeShift(); {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 136: Hoare triple {20972#false} assume 0 != test_~tmp___2~0#1; {20972#false} is VALID [2022-02-20 18:12:21,227 INFO L290 TraceCheckUtils]: 135: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20972#false} is VALID [2022-02-20 18:12:21,228 INFO L290 TraceCheckUtils]: 134: Hoare triple {20972#false} assume !(0 != test_~tmp___0~2#1); {20972#false} is VALID [2022-02-20 18:12:21,228 INFO L290 TraceCheckUtils]: 133: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20972#false} is VALID [2022-02-20 18:12:21,228 INFO L284 TraceCheckUtils]: 132: Hoare quadruple {20971#true} {20972#false} #244#return; {20972#false} is VALID [2022-02-20 18:12:21,228 INFO L290 TraceCheckUtils]: 131: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,228 INFO L290 TraceCheckUtils]: 130: Hoare triple {20971#true} assume !(~waterLevel~0 < 2); {20971#true} is VALID [2022-02-20 18:12:21,228 INFO L272 TraceCheckUtils]: 129: Hoare triple {20972#false} call waterRise(); {20971#true} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 128: Hoare triple {20972#false} assume 0 != test_~tmp~5#1; {20972#false} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 127: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20972#false} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 126: Hoare triple {20972#false} assume test_~splverifierCounter~0#1 < 4; {20972#false} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 125: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:21,229 INFO L284 TraceCheckUtils]: 124: Hoare quadruple {20971#true} {20972#false} #248#return; {20972#false} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 123: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,229 INFO L290 TraceCheckUtils]: 122: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 121: Hoare triple {20971#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 120: Hoare triple {20971#true} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 119: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 118: Hoare triple {20971#true} assume { :end_inline_processEnvironment } true; {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 117: Hoare triple {20971#true} assume { :end_inline_deactivatePump } true; {20971#true} is VALID [2022-02-20 18:12:21,230 INFO L290 TraceCheckUtils]: 116: Hoare triple {20971#true} assume 0 != processEnvironment_~tmp~3#1;assume { :begin_inline_deactivatePump } true;~pumpRunning~0 := 0; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 115: Hoare triple {20971#true} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 114: Hoare triple {20971#true} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 113: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 112: Hoare triple {20971#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 111: Hoare triple {20971#true} assume { :end_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:21,231 INFO L290 TraceCheckUtils]: 110: Hoare triple {20971#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L290 TraceCheckUtils]: 109: Hoare triple {20971#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L290 TraceCheckUtils]: 108: Hoare triple {20971#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L290 TraceCheckUtils]: 107: Hoare triple {20971#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {20971#true} {20971#true} #232#return; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L290 TraceCheckUtils]: 105: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,232 INFO L290 TraceCheckUtils]: 104: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:21,233 INFO L272 TraceCheckUtils]: 103: Hoare triple {20971#true} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:21,233 INFO L290 TraceCheckUtils]: 102: Hoare triple {20971#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {20971#true} is VALID [2022-02-20 18:12:21,233 INFO L272 TraceCheckUtils]: 101: Hoare triple {20972#false} call timeShift(); {20971#true} is VALID [2022-02-20 18:12:21,233 INFO L290 TraceCheckUtils]: 100: Hoare triple {20972#false} assume 0 != test_~tmp___2~0#1; {20972#false} is VALID [2022-02-20 18:12:21,233 INFO L290 TraceCheckUtils]: 99: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {20972#false} is VALID [2022-02-20 18:12:21,233 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {20971#true} {20972#false} #246#return; {20972#false} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 97: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 96: Hoare triple {20971#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20971#true} is VALID [2022-02-20 18:12:21,234 INFO L272 TraceCheckUtils]: 95: Hoare triple {20972#false} call changeMethaneLevel(); {20971#true} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 94: Hoare triple {20972#false} assume 0 != test_~tmp___0~2#1; {20972#false} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 93: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {20972#false} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 92: Hoare triple {20972#false} assume !(0 != test_~tmp~5#1); {20972#false} is VALID [2022-02-20 18:12:21,234 INFO L290 TraceCheckUtils]: 91: Hoare triple {20972#false} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {20972#false} is VALID [2022-02-20 18:12:21,235 INFO L290 TraceCheckUtils]: 90: Hoare triple {20972#false} assume test_~splverifierCounter~0#1 < 4; {20972#false} is VALID [2022-02-20 18:12:21,235 INFO L290 TraceCheckUtils]: 89: Hoare triple {20972#false} assume !false; {20972#false} is VALID [2022-02-20 18:12:21,235 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {21895#(< 2 |old(~waterLevel~0)|)} {21170#(<= ~waterLevel~0 2)} #248#return; {20972#false} is VALID [2022-02-20 18:12:21,236 INFO L290 TraceCheckUtils]: 87: Hoare triple {21895#(< 2 |old(~waterLevel~0)|)} assume true; {21895#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,236 INFO L290 TraceCheckUtils]: 86: Hoare triple {21895#(< 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21895#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,237 INFO L290 TraceCheckUtils]: 85: Hoare triple {21905#(or (< 2 |old(~waterLevel~0)|) (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21895#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,237 INFO L290 TraceCheckUtils]: 84: Hoare triple {21909#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21905#(or (< 2 |old(~waterLevel~0)|) (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|)))} is VALID [2022-02-20 18:12:21,238 INFO L290 TraceCheckUtils]: 83: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21909#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,238 INFO L290 TraceCheckUtils]: 82: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_processEnvironment } true; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,238 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20971#true} {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} #234#return; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,238 INFO L290 TraceCheckUtils]: 80: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20971#true} {20971#true} #254#return; {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L290 TraceCheckUtils]: 78: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L272 TraceCheckUtils]: 77: Hoare triple {20971#true} call processEnvironment__wrappee__base(); {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L290 TraceCheckUtils]: 76: Hoare triple {20971#true} assume !(0 == ~pumpRunning~0); {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L290 TraceCheckUtils]: 75: Hoare triple {20971#true} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:21,239 INFO L272 TraceCheckUtils]: 74: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} call processEnvironment__wrappee__highWaterSensor(); {20971#true} is VALID [2022-02-20 18:12:21,240 INFO L290 TraceCheckUtils]: 73: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume !(0 != processEnvironment_~tmp~3#1); {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,240 INFO L290 TraceCheckUtils]: 72: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} processEnvironment_#t~ret14#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret14#1 && processEnvironment_#t~ret14#1 <= 2147483647;processEnvironment_~tmp~3#1 := processEnvironment_#t~ret14#1;havoc processEnvironment_#t~ret14#1; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,240 INFO L290 TraceCheckUtils]: 71: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isMethaneAlarm_#t~ret15#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret15#1 && isMethaneAlarm_#t~ret15#1 <= 2147483647;isMethaneAlarm_~retValue_acc~4#1 := isMethaneAlarm_#t~ret15#1;havoc isMethaneAlarm_#t~ret15#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~4#1; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,241 INFO L290 TraceCheckUtils]: 70: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret15#1, isMethaneAlarm_~retValue_acc~4#1;havoc isMethaneAlarm_~retValue_acc~4#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;havoc isMethaneLevelCritical_~retValue_acc~0#1;isMethaneLevelCritical_~retValue_acc~0#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~0#1; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,241 INFO L290 TraceCheckUtils]: 69: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,241 INFO L290 TraceCheckUtils]: 68: Hoare triple {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_lowerWaterLevel } true; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,242 INFO L290 TraceCheckUtils]: 67: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21913#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,243 INFO L290 TraceCheckUtils]: 66: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,243 INFO L290 TraceCheckUtils]: 65: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,243 INFO L290 TraceCheckUtils]: 64: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,244 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {20971#true} {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #232#return; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,244 INFO L290 TraceCheckUtils]: 62: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,244 INFO L290 TraceCheckUtils]: 61: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:21,244 INFO L272 TraceCheckUtils]: 60: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:21,245 INFO L290 TraceCheckUtils]: 59: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,245 INFO L272 TraceCheckUtils]: 58: Hoare triple {21170#(<= ~waterLevel~0 2)} call timeShift(); {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,246 INFO L290 TraceCheckUtils]: 57: Hoare triple {21170#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,246 INFO L290 TraceCheckUtils]: 56: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,247 INFO L290 TraceCheckUtils]: 55: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,247 INFO L290 TraceCheckUtils]: 54: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,247 INFO L290 TraceCheckUtils]: 53: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,248 INFO L290 TraceCheckUtils]: 52: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,248 INFO L290 TraceCheckUtils]: 51: Hoare triple {21170#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,248 INFO L290 TraceCheckUtils]: 50: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !false; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,249 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} {21170#(<= ~waterLevel~0 2)} #248#return; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,250 INFO L290 TraceCheckUtils]: 48: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,250 INFO L290 TraceCheckUtils]: 47: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,250 INFO L290 TraceCheckUtils]: 46: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~0#1); {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,251 INFO L290 TraceCheckUtils]: 45: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} __utac_acc__Specification5_spec__3_#t~ret10#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret10#1 && __utac_acc__Specification5_spec__3_#t~ret10#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~0#1 := __utac_acc__Specification5_spec__3_#t~ret10#1;havoc __utac_acc__Specification5_spec__3_#t~ret10#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,251 INFO L290 TraceCheckUtils]: 44: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret10#1, __utac_acc__Specification5_spec__3_#t~ret11#1, __utac_acc__Specification5_spec__3_~tmp~0#1, __utac_acc__Specification5_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification5_spec__3_~tmp~0#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~0#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~1#1;havoc getWaterLevel_~retValue_acc~1#1;getWaterLevel_~retValue_acc~1#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~1#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,252 INFO L290 TraceCheckUtils]: 43: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_processEnvironment } true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,252 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20971#true} {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #236#return; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,252 INFO L290 TraceCheckUtils]: 41: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,252 INFO L290 TraceCheckUtils]: 40: Hoare triple {20971#true} assume { :end_inline_activatePump } true; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 39: Hoare triple {20971#true} assume 0 != ~tmp~2#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 38: Hoare triple {20971#true} #t~ret13#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret13#1 && #t~ret13#1 <= 2147483647;~tmp~2#1 := #t~ret13#1;havoc #t~ret13#1; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 37: Hoare triple {20971#true} isHighWaterLevel_~retValue_acc~6#1 := isHighWaterLevel_~tmp___0~1#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~6#1; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 36: Hoare triple {20971#true} assume !(0 != isHighWaterLevel_~tmp~4#1);isHighWaterLevel_~tmp___0~1#1 := 1; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 35: Hoare triple {20971#true} isHighWaterLevel_#t~ret24#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret24#1 && isHighWaterLevel_#t~ret24#1 <= 2147483647;isHighWaterLevel_~tmp~4#1 := isHighWaterLevel_#t~ret24#1;havoc isHighWaterLevel_#t~ret24#1; {20971#true} is VALID [2022-02-20 18:12:21,253 INFO L290 TraceCheckUtils]: 34: Hoare triple {20971#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:21,254 INFO L290 TraceCheckUtils]: 33: Hoare triple {20971#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret24#1, isHighWaterLevel_~retValue_acc~6#1, isHighWaterLevel_~tmp~4#1, isHighWaterLevel_~tmp___0~1#1;havoc isHighWaterLevel_~retValue_acc~6#1;havoc isHighWaterLevel_~tmp~4#1;havoc isHighWaterLevel_~tmp___0~1#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~2#1;havoc isHighWaterSensorDry_~retValue_acc~2#1; {20971#true} is VALID [2022-02-20 18:12:21,254 INFO L290 TraceCheckUtils]: 32: Hoare triple {20971#true} havoc ~tmp~2#1; {20971#true} is VALID [2022-02-20 18:12:21,254 INFO L272 TraceCheckUtils]: 31: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call processEnvironment__wrappee__highWaterSensor(); {20971#true} is VALID [2022-02-20 18:12:21,254 INFO L290 TraceCheckUtils]: 30: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,255 INFO L290 TraceCheckUtils]: 29: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret14#1, processEnvironment_~tmp~3#1;havoc processEnvironment_~tmp~3#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,255 INFO L290 TraceCheckUtils]: 28: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,256 INFO L290 TraceCheckUtils]: 27: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,256 INFO L290 TraceCheckUtils]: 26: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret9#1 && __utac_acc__Specification5_spec__2_#t~ret9#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret9#1;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,257 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20971#true} {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #232#return; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,257 INFO L290 TraceCheckUtils]: 24: Hoare triple {20971#true} assume true; {20971#true} is VALID [2022-02-20 18:12:21,257 INFO L290 TraceCheckUtils]: 23: Hoare triple {20971#true} havoc ~retValue_acc~5;~retValue_acc~5 := ~pumpRunning~0;#res := ~retValue_acc~5; {20971#true} is VALID [2022-02-20 18:12:21,257 INFO L272 TraceCheckUtils]: 22: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret9#1 := isPumpRunning(); {20971#true} is VALID [2022-02-20 18:12:21,257 INFO L290 TraceCheckUtils]: 21: Hoare triple {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret9#1; {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,258 INFO L272 TraceCheckUtils]: 20: Hoare triple {21170#(<= ~waterLevel~0 2)} call timeShift(); {21962#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:21,258 INFO L290 TraceCheckUtils]: 19: Hoare triple {21170#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,259 INFO L290 TraceCheckUtils]: 18: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet27#1 && test_#t~nondet27#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet27#1;havoc test_#t~nondet27#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,259 INFO L290 TraceCheckUtils]: 17: Hoare triple {21170#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2#1); {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,259 INFO L290 TraceCheckUtils]: 16: Hoare triple {21170#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet26#1 && test_#t~nondet26#1 <= 2147483647;test_~tmp___0~2#1 := test_#t~nondet26#1;havoc test_#t~nondet26#1; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,260 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {22119#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} {21122#(<= ~waterLevel~0 1)} #244#return; {21170#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,260 INFO L290 TraceCheckUtils]: 14: Hoare triple {22119#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} assume true; {22119#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:21,261 INFO L290 TraceCheckUtils]: 13: Hoare triple {22126#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22119#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:21,261 INFO L272 TraceCheckUtils]: 12: Hoare triple {21122#(<= ~waterLevel~0 1)} call waterRise(); {22126#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:21,262 INFO L290 TraceCheckUtils]: 11: Hoare triple {21122#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,262 INFO L290 TraceCheckUtils]: 10: Hoare triple {21122#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet25#1 && test_#t~nondet25#1 <= 2147483647;test_~tmp~5#1 := test_#t~nondet25#1;havoc test_#t~nondet25#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,262 INFO L290 TraceCheckUtils]: 9: Hoare triple {21122#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,263 INFO L290 TraceCheckUtils]: 8: Hoare triple {21122#(<= ~waterLevel~0 1)} assume !false; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,263 INFO L290 TraceCheckUtils]: 7: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet25#1, test_#t~nondet26#1, test_#t~nondet27#1, test_#t~nondet28#1, test_~splverifierCounter~0#1, test_~tmp~5#1, test_~tmp___0~2#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~5#1;havoc test_~tmp___0~2#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,263 INFO L290 TraceCheckUtils]: 6: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,264 INFO L290 TraceCheckUtils]: 5: Hoare triple {21122#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1#1;assume { :begin_inline_setup } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,264 INFO L290 TraceCheckUtils]: 4: Hoare triple {21122#(<= ~waterLevel~0 1)} main_#t~ret12#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret12#1 && main_#t~ret12#1 <= 2147483647;main_~tmp~1#1 := main_#t~ret12#1;havoc main_#t~ret12#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,264 INFO L290 TraceCheckUtils]: 3: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~8#1;havoc valid_product_~retValue_acc~8#1;valid_product_~retValue_acc~8#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~8#1; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,265 INFO L290 TraceCheckUtils]: 2: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,265 INFO L290 TraceCheckUtils]: 1: Hoare triple {21122#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret12#1, main_~retValue_acc~3#1, main_~tmp~1#1;havoc main_~retValue_acc~3#1;havoc main_~tmp~1#1;assume { :begin_inline_select_helpers } true; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,267 INFO L290 TraceCheckUtils]: 0: Hoare triple {20971#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(7, 5);call write~init~int(44, 5, 0, 1);call write~init~int(77, 5, 1, 1);call write~init~int(101, 5, 2, 1);call write~init~int(116, 5, 3, 1);call write~init~int(104, 5, 4, 1);call write~init~int(58, 5, 5, 1);call write~init~int(0, 5, 6, 1);call #Ultimate.allocInit(5, 6);call write~init~int(67, 6, 0, 1);call write~init~int(82, 6, 1, 1);call write~init~int(73, 6, 2, 1);call write~init~int(84, 6, 3, 1);call write~init~int(0, 6, 4, 1);call #Ultimate.allocInit(3, 7);call write~init~int(79, 7, 0, 1);call write~init~int(75, 7, 1, 1);call write~init~int(0, 7, 2, 1);call #Ultimate.allocInit(2, 8);call write~init~int(41, 8, 0, 1);call write~init~int(0, 8, 1, 1);call #Ultimate.allocInit(13, 9);call #Ultimate.allocInit(3, 10);call write~init~int(79, 10, 0, 1);call write~init~int(110, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(4, 11);call write~init~int(79, 11, 0, 1);call write~init~int(102, 11, 1, 1);call write~init~int(102, 11, 2, 1);call write~init~int(0, 11, 3, 1);call #Ultimate.allocInit(7, 12);call write~init~int(44, 12, 0, 1);call write~init~int(80, 12, 1, 1);call write~init~int(117, 12, 2, 1);call write~init~int(109, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(3, 13);call write~init~int(79, 13, 0, 1);call write~init~int(110, 13, 1, 1);call write~init~int(0, 13, 2, 1);call #Ultimate.allocInit(4, 14);call write~init~int(79, 14, 0, 1);call write~init~int(102, 14, 1, 1);call write~init~int(102, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(3, 15);call write~init~int(41, 15, 0, 1);call write~init~int(32, 15, 1, 1);call write~init~int(0, 15, 2, 1);call #Ultimate.allocInit(2, 16);call write~init~int(10, 16, 0, 1);call write~init~int(0, 16, 1, 1);call #Ultimate.allocInit(30, 17);call #Ultimate.allocInit(9, 18);call #Ultimate.allocInit(21, 19);call #Ultimate.allocInit(30, 20);call #Ultimate.allocInit(9, 21);call #Ultimate.allocInit(21, 22);call #Ultimate.allocInit(30, 23);call #Ultimate.allocInit(9, 24);call #Ultimate.allocInit(25, 25);call #Ultimate.allocInit(30, 26);call #Ultimate.allocInit(9, 27);call #Ultimate.allocInit(25, 28);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~switchedOnBeforeTS~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {21122#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,268 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-02-20 18:12:21,268 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1523370805] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:21,268 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:21,269 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-02-20 18:12:21,269 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [304449558] [2022-02-20 18:12:21,269 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:21,270 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) Word has length 172 [2022-02-20 18:12:21,295 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:21,296 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) [2022-02-20 18:12:21,478 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 281 edges. 281 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:21,479 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-02-20 18:12:21,479 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:21,479 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-02-20 18:12:21,480 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-02-20 18:12:21,480 INFO L87 Difference]: Start difference. First operand 997 states and 1170 transitions. Second operand has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) [2022-02-20 18:12:26,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,321 INFO L93 Difference]: Finished difference Result 2106 states and 2544 transitions. [2022-02-20 18:12:26,321 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-02-20 18:12:26,322 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) Word has length 172 [2022-02-20 18:12:26,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:26,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) [2022-02-20 18:12:26,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 335 transitions. [2022-02-20 18:12:26,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) [2022-02-20 18:12:26,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 335 transitions. [2022-02-20 18:12:26,341 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 31 states and 335 transitions. [2022-02-20 18:12:26,597 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 335 edges. 335 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:26,598 INFO L225 Difference]: With dead ends: 2106 [2022-02-20 18:12:26,598 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:12:26,602 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 419 GetRequests, 366 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2022-02-20 18:12:26,603 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 798 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 1537 mSolverCounterSat, 324 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 801 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 1861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 324 IncrementalHoareTripleChecker+Valid, 1537 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:26,603 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [801 Valid, 518 Invalid, 1861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [324 Valid, 1537 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-02-20 18:12:26,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:12:26,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:12:26,604 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:26,604 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:26,604 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:26,604 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:26,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,604 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:26,604 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:26,604 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,604 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,604 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:26,604 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:26,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:26,605 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:26,605 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:26,605 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,605 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:26,605 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:26,605 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:26,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:26,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:12:26,605 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 172 [2022-02-20 18:12:26,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:26,605 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:12:26,606 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.192307692307692) internal successors, (213), 22 states have internal predecessors, (213), 9 states have call successors, (33), 10 states have call predecessors, (33), 10 states have return successors, (35), 8 states have call predecessors, (35), 9 states have call successors, (35) [2022-02-20 18:12:26,606 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:26,606 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:26,609 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:26,629 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-02-20 18:12:26,819 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-02-20 18:12:26,821 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:12:38,637 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 346 352) no Hoare annotation was computed. [2022-02-20 18:12:38,637 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 346 352) the Hoare annotation is: true [2022-02-20 18:12:38,637 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 83 94) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse3))) [2022-02-20 18:12:38,637 INFO L858 garLoopResultBuilder]: For program point L87-1(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:12:38,637 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 83 94) no Hoare annotation was computed. [2022-02-20 18:12:38,638 INFO L858 garLoopResultBuilder]: For program point L184(lines 184 194) no Hoare annotation was computed. [2022-02-20 18:12:38,638 INFO L858 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2022-02-20 18:12:38,638 INFO L854 garLoopResultBuilder]: At program point L180-1(lines 172 200) the Hoare annotation is: (let ((.cse21 (= ~methaneLevelCritical~0 0)) (.cse22 (= 1 ~systemActive~0))) (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not .cse22)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse20 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse25 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse14 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse16 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse29 (<= ~waterLevel~0 1)) (.cse11 (not .cse21)) (.cse30 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse17 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse26 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse18 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse23 (and .cse25 .cse14 .cse4 .cse0 .cse16 .cse29 .cse22 .cse11 .cse30 .cse17 .cse26 .cse18)) (.cse24 (and (or .cse5 .cse10 .cse8 (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse10 .cse20))) (.cse12 (and .cse6 .cse13 .cse25 .cse14 .cse4 .cse21 .cse16 .cse29 .cse22 .cse30 .cse17 .cse26 .cse18)) (.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse19 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|))) (.cse28 (not (< 1 |old(~waterLevel~0)|))) (.cse27 (= ~waterLevel~0 1)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (and .cse6 .cse1 .cse2 .cse3) .cse7 .cse8)) (or .cse9 .cse5 .cse10 .cse11 .cse12 (and .cse13 .cse14 .cse15 .cse16 .cse17 .cse2 .cse18 .cse19) .cse20) (or .cse21 .cse5 .cse10 (and .cse14 .cse4 .cse0 .cse15 .cse16 .cse22 .cse17 .cse2 .cse18 .cse19) .cse7 .cse20 .cse23) (or .cse9 .cse21 .cse24 .cse23) (or .cse9 .cse24 .cse11 .cse12) (or .cse9 .cse4 .cse5 (and .cse0 .cse15 .cse2 .cse19)) (or (and .cse13 .cse25 .cse14 .cse4 .cse16 .cse22 .cse17 .cse26 .cse27 .cse18) .cse5 .cse10 .cse28 .cse11 .cse7) (or .cse21 .cse5 .cse10 .cse28 (and .cse25 .cse14 .cse4 .cse0 .cse16 .cse22 .cse17 .cse26 .cse27 .cse18) .cse7))))) [2022-02-20 18:12:38,638 INFO L854 garLoopResultBuilder]: At program point L399(line 399) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse1))) [2022-02-20 18:12:38,639 INFO L854 garLoopResultBuilder]: At program point L399-1(lines 380 404) the Hoare annotation is: (let ((.cse23 (= 1 ~systemActive~0))) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse17 (= ~pumpRunning~0 0)) (.cse1 (not .cse23)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse14 (<= 1 ~pumpRunning~0)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse15 (= ~methaneLevelCritical~0 0)) (.cse8 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse22 (<= ~waterLevel~0 1)) (.cse24 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (and .cse14 .cse6 .cse7 .cse15 .cse8 .cse22 .cse23 .cse24 .cse9 .cse11)) (.cse21 (and (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse5))) (.cse20 (and .cse7 .cse12 .cse17 .cse8 .cse22 .cse23 .cse24 .cse9 .cse11)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse17 .cse10)) (.cse16 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not .cse15)) (.cse18 (= ~waterLevel~0 1)) (.cse19 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)) (or .cse12 .cse13 .cse1 (and .cse14 .cse10) (not (= |old(~waterLevel~0)| 2))) (or .cse15 .cse1 .cse2 .cse16 (and .cse7 .cse17 .cse8 .cse9 .cse18 .cse11) .cse19) (or .cse15 .cse1 .cse2 .cse20 .cse19 (and .cse7 .cse17 .cse8 .cse9 .cse10 .cse11) .cse5) (or .cse0 .cse21 .cse3 .cse4) (or .cse0 .cse15 .cse21 .cse20) (or .cse0 .cse12 .cse13 .cse1) (or .cse1 .cse2 .cse16 .cse3 (and .cse6 .cse7 .cse8 .cse9 .cse18 .cse11) .cse19))))) [2022-02-20 18:12:38,639 INFO L854 garLoopResultBuilder]: At program point L428(lines 421 431) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse9 (= 1 ~systemActive~0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (and (<= 1 ~pumpRunning~0) .cse4 .cse5 .cse6 (<= ~waterLevel~0 1) .cse9 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7)) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse9)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7) .cse8) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse8) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse3) (or .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse3)))) [2022-02-20 18:12:38,639 INFO L858 garLoopResultBuilder]: For program point L333-1(lines 333 339) no Hoare annotation was computed. [2022-02-20 18:12:38,639 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 319 345) no Hoare annotation was computed. [2022-02-20 18:12:38,639 INFO L858 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-02-20 18:12:38,639 INFO L858 garLoopResultBuilder]: For program point L309(line 309) no Hoare annotation was computed. [2022-02-20 18:12:38,640 INFO L854 garLoopResultBuilder]: At program point L169(lines 162 171) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse3 .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5) (or .cse3 .cse2 .cse4 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:12:38,640 INFO L858 garLoopResultBuilder]: For program point L326(lines 326 332) no Hoare annotation was computed. [2022-02-20 18:12:38,640 INFO L858 garLoopResultBuilder]: For program point L326-2(lines 322 344) no Hoare annotation was computed. [2022-02-20 18:12:38,640 INFO L858 garLoopResultBuilder]: For program point L388(lines 388 396) no Hoare annotation was computed. [2022-02-20 18:12:38,640 INFO L854 garLoopResultBuilder]: At program point L132(lines 127 135) the Hoare annotation is: (let ((.cse25 (= 1 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0))) (let ((.cse23 (<= 1 ~pumpRunning~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 1)) (.cse3 (not .cse5)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse12 (<= 1 ~switchedOnBeforeTS~0)) (.cse1 (not .cse25)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse17 (and (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse15))) (.cse13 (and .cse24 .cse6 .cse19 .cse7 .cse9 .cse20 .cse25 .cse3 .cse26 .cse10 .cse12)) (.cse0 (and .cse23 .cse18 .cse24 .cse6 .cse9 .cse20 .cse25 .cse26 .cse10 .cse12)) (.cse16 (not (<= |old(~waterLevel~0)| 1))) (.cse8 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) .cse13 .cse14 .cse15) (or .cse0 .cse16 .cse17 .cse3) (or .cse5 .cse1 .cse2 .cse13 .cse4) (or .cse16 .cse5 .cse17 .cse13) (or .cse0 .cse16 .cse1 .cse2 (and .cse18 .cse6 .cse8 .cse9 .cse10 .cse11 .cse12) .cse3 .cse15) (let ((.cse21 (= 2 ~waterLevel~0)) (.cse22 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse19 .cse1 (and .cse7 .cse8 .cse20 .cse11) (and .cse7 .cse21 .cse22 .cse11) .cse14 (and .cse23 .cse21 .cse22 .cse11))) (or .cse1 .cse2 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse14))))) [2022-02-20 18:12:38,641 INFO L858 garLoopResultBuilder]: For program point L384(lines 384 401) no Hoare annotation was computed. [2022-02-20 18:12:38,641 INFO L854 garLoopResultBuilder]: At program point L182(line 182) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse25 (= 1 ~systemActive~0))) (let ((.cse16 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not .cse25)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse24 (<= ~waterLevel~0 1)) (.cse20 (not .cse1)) (.cse26 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse18 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse13 (and .cse17 .cse4 .cse14 .cse5 .cse7 .cse24 .cse25 .cse20 .cse26 .cse8 .cse18 .cse10)) (.cse15 (not (< 1 |old(~waterLevel~0)|))) (.cse19 (= ~waterLevel~0 1)) (.cse21 (not (<= |old(~waterLevel~0)| 2))) (.cse11 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|))) (.cse22 (and (or .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse12))) (.cse23 (and (<= 1 ~pumpRunning~0) .cse16 .cse17 .cse4 .cse1 .cse7 .cse24 .cse25 .cse26 .cse8 .cse18 .cse10)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse13) (or .cse14 .cse2 (not (= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 .cse15 (and .cse16 .cse17 .cse4 .cse7 .cse8 .cse18 .cse19 .cse10) .cse20 .cse21) (or .cse0 .cse1 .cse22 .cse13) (or .cse1 .cse2 .cse3 .cse15 (and .cse17 .cse4 .cse5 .cse7 .cse8 .cse18 .cse19 .cse10) .cse21) (or .cse0 .cse2 .cse3 .cse20 (and .cse16 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse23 .cse12) (or .cse0 .cse22 .cse20 .cse23) (or .cse0 .cse14 (and .cse5 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) .cse6 .cse9) .cse2))))) [2022-02-20 18:12:38,641 INFO L854 garLoopResultBuilder]: At program point L310(lines 305 312) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-02-20 18:12:38,641 INFO L858 garLoopResultBuilder]: For program point L182-1(line 182) no Hoare annotation was computed. [2022-02-20 18:12:38,642 INFO L854 garLoopResultBuilder]: At program point L100(lines 95 103) the Hoare annotation is: (let ((.cse11 (= ~methaneLevelCritical~0 0)) (.cse17 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse17)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (<= 1 ~pumpRunning~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse3 (not .cse11)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (and .cse8 .cse9 (= |old(~waterLevel~0)| ~waterLevel~0) .cse10)) (.cse12 (and .cse15 .cse8 .cse9 .cse16 .cse17 .cse3 .cse18 .cse10)) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse14 (and (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|)) (= |old(~switchedOnBeforeTS~0)| 0)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse6))) (.cse4 (and .cse15 .cse8 .cse11 .cse9 .cse16 .cse17 .cse18 .cse10)) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (or .cse1 .cse2 .cse7 (and .cse8 .cse9 .cse10) .cse5) (or .cse0 .cse11 .cse1 .cse2 .cse12 .cse5 .cse6) (or .cse13 .cse11 .cse14 .cse12) (or .cse13 .cse14 .cse3 .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse5) (or .cse1 .cse2 .cse7 (= ~waterLevel~0 1) .cse5))))) [2022-02-20 18:12:38,642 INFO L854 garLoopResultBuilder]: At program point L418(lines 413 420) the Hoare annotation is: (let ((.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (= 1 ~systemActive~0)) (.cse8 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and .cse5 .cse11 .cse6 .cse7 (<= ~waterLevel~0 1) .cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse8 .cse9)) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 (and .cse5 .cse6 .cse7 .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse9) .cse3) (or (and .cse5 .cse6 .cse7 .cse10 .cse8 (= ~waterLevel~0 1) .cse9) .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse4) (or .cse11 .cse0 .cse4) (or .cse0 .cse1 .cse10 .cse4 .cse3)))) [2022-02-20 18:12:38,642 INFO L858 garLoopResultBuilder]: For program point L63(lines 63 67) no Hoare annotation was computed. [2022-02-20 18:12:38,642 INFO L854 garLoopResultBuilder]: At program point L63-2(lines 59 70) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (= 1 ~systemActive~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (and (<= 1 ~pumpRunning~0) .cse0 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not .cse8)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1) .cse2 .cse3 .cse4 .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3 .cse6 .cse5 .cse7) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse6 .cse7) (or (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse5) (or .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5)))) [2022-02-20 18:12:38,642 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 319 345) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:12:38,643 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 319 345) no Hoare annotation was computed. [2022-02-20 18:12:38,643 INFO L854 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0)) (.cse7 (= |timeShift_processEnvironment_~tmp~3#1| ~methaneLevelCritical~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (and (<= 1 ~pumpRunning~0) .cse4 .cse5 .cse9 .cse6 (<= ~waterLevel~0 1) .cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse7 .cse8)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not .cse11)) (.cse10 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 (= |old(~waterLevel~0)| ~waterLevel~0) .cse8)) (or .cse9 .cse0 .cse1 .cse10 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 .cse9 .cse6 .cse7 (= ~waterLevel~0 1) .cse8) .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse10) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse10)))) [2022-02-20 18:12:38,643 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 309) no Hoare annotation was computed. [2022-02-20 18:12:38,643 INFO L854 garLoopResultBuilder]: At program point L167(line 167) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 2)) .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse3 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-02-20 18:12:38,643 INFO L858 garLoopResultBuilder]: For program point L167-1(line 167) no Hoare annotation was computed. [2022-02-20 18:12:38,644 INFO L858 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2022-02-20 18:12:38,644 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2022-02-20 18:12:38,644 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 204 233) the Hoare annotation is: true [2022-02-20 18:12:38,644 INFO L858 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2022-02-20 18:12:38,644 INFO L861 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2022-02-20 18:12:38,644 INFO L858 garLoopResultBuilder]: For program point L215(line 215) no Hoare annotation was computed. [2022-02-20 18:12:38,644 INFO L861 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2022-02-20 18:12:38,644 INFO L861 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2022-02-20 18:12:38,645 INFO L858 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2022-02-20 18:12:38,645 INFO L861 garLoopResultBuilder]: At program point L229(lines 204 233) the Hoare annotation is: true [2022-02-20 18:12:38,645 INFO L858 garLoopResultBuilder]: For program point L291-2(lines 291 298) no Hoare annotation was computed. [2022-02-20 18:12:38,645 INFO L854 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:38,645 INFO L858 garLoopResultBuilder]: For program point L543(lines 543 547) no Hoare annotation was computed. [2022-02-20 18:12:38,645 INFO L854 garLoopResultBuilder]: At program point L543-2(lines 537 548) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:38,645 INFO L861 garLoopResultBuilder]: At program point L275(lines 267 277) the Hoare annotation is: true [2022-02-20 18:12:38,646 INFO L858 garLoopResultBuilder]: For program point L527(lines 527 533) no Hoare annotation was computed. [2022-02-20 18:12:38,646 INFO L858 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2022-02-20 18:12:38,646 INFO L861 garLoopResultBuilder]: At program point L556(lines 497 560) the Hoare annotation is: true [2022-02-20 18:12:38,646 INFO L861 garLoopResultBuilder]: At program point L300(lines 281 303) the Hoare annotation is: true [2022-02-20 18:12:38,646 INFO L854 garLoopResultBuilder]: At program point L263(lines 259 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:38,646 INFO L854 garLoopResultBuilder]: At program point L519(line 519) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2022-02-20 18:12:38,647 INFO L854 garLoopResultBuilder]: At program point L577(lines 573 579) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:12:38,647 INFO L854 garLoopResultBuilder]: At program point L553(lines 506 554) the Hoare annotation is: false [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point L508(lines 507 552) no Hoare annotation was computed. [2022-02-20 18:12:38,647 INFO L858 garLoopResultBuilder]: For program point L537(lines 537 548) no Hoare annotation was computed. [2022-02-20 18:12:38,648 INFO L854 garLoopResultBuilder]: At program point L529(line 529) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 (= ~methaneLevelCritical~0 0) (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-02-20 18:12:38,648 INFO L854 garLoopResultBuilder]: At program point L550(lines 507 552) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse4 (= ~methaneLevelCritical~0 0) .cse5 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3))) [2022-02-20 18:12:38,648 INFO L858 garLoopResultBuilder]: For program point L517(lines 517 523) no Hoare annotation was computed. [2022-02-20 18:12:38,648 INFO L858 garLoopResultBuilder]: For program point L517-1(lines 517 523) no Hoare annotation was computed. [2022-02-20 18:12:38,648 INFO L858 garLoopResultBuilder]: For program point L509(lines 509 513) no Hoare annotation was computed. [2022-02-20 18:12:38,648 INFO L854 garLoopResultBuilder]: At program point L592(lines 587 595) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:38,649 INFO L854 garLoopResultBuilder]: At program point L584(lines 580 586) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:38,649 INFO L858 garLoopResultBuilder]: For program point L291(lines 291 298) no Hoare annotation was computed. [2022-02-20 18:12:38,649 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 354 378) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:38,649 INFO L854 garLoopResultBuilder]: At program point L145(lines 136 149) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse1 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:38,649 INFO L854 garLoopResultBuilder]: At program point L368(line 368) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse4)) (.cse2 (not .cse4)) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 (not (= 2 ~waterLevel~0))) (or .cse0 .cse1 .cse2 .cse3) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-02-20 18:12:38,650 INFO L854 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= 2 ~waterLevel~0)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:38,650 INFO L858 garLoopResultBuilder]: For program point L362(lines 362 370) no Hoare annotation was computed. [2022-02-20 18:12:38,650 INFO L858 garLoopResultBuilder]: For program point L358(lines 358 375) no Hoare annotation was computed. [2022-02-20 18:12:38,650 INFO L858 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2022-02-20 18:12:38,650 INFO L858 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2022-02-20 18:12:38,650 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 354 378) no Hoare annotation was computed. [2022-02-20 18:12:38,650 INFO L854 garLoopResultBuilder]: At program point L410(lines 405 412) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2022-02-20 18:12:38,651 INFO L854 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point L373-1(lines 354 378) no Hoare annotation was computed. [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point L140(lines 140 146) no Hoare annotation was computed. [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point L75-1(lines 71 82) no Hoare annotation was computed. [2022-02-20 18:12:38,651 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 71 82) the Hoare annotation is: (let ((.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse0 (not (= |old(~waterLevel~0)| 2)) .cse2) (or .cse4 .cse3 .cse0 .cse2) (or .cse4 .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 432 440) no Hoare annotation was computed. [2022-02-20 18:12:38,651 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 432 440) the Hoare annotation is: true [2022-02-20 18:12:38,651 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 432 440) no Hoare annotation was computed. [2022-02-20 18:12:38,653 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:38,655 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:38,657 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:38,657 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:12:38,657 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L87-1 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2022-02-20 18:12:38,659 WARN L170 areAnnotationChecker]: L210-1 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L75-1 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L373-1 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2022-02-20 18:12:38,661 WARN L170 areAnnotationChecker]: L210-1 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L373-1 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L527-1 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-02-20 18:12:38,662 WARN L170 areAnnotationChecker]: L215 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L517-1 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L182-1 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L333-1 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L537 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L537 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:38,663 WARN L170 areAnnotationChecker]: L215 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L486 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L527 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L184 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L184 has no Hoare annotation [2022-02-20 18:12:38,664 WARN L170 areAnnotationChecker]: L333-1 has no Hoare annotation [2022-02-20 18:12:38,665 WARN L170 areAnnotationChecker]: L543 has no Hoare annotation [2022-02-20 18:12:38,665 WARN L170 areAnnotationChecker]: L543 has no Hoare annotation [2022-02-20 18:12:38,665 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:12:38,665 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L218 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L218 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L486-2 has no Hoare annotation [2022-02-20 18:12:38,666 WARN L170 areAnnotationChecker]: L527-1 has no Hoare annotation [2022-02-20 18:12:38,667 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2022-02-20 18:12:38,667 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2022-02-20 18:12:38,668 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:38,668 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-02-20 18:12:38,669 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:38,670 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2022-02-20 18:12:38,670 WARN L170 areAnnotationChecker]: L384 has no Hoare annotation [2022-02-20 18:12:38,670 WARN L170 areAnnotationChecker]: L384 has no Hoare annotation [2022-02-20 18:12:38,670 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-02-20 18:12:38,671 WARN L170 areAnnotationChecker]: L291-2 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L309 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L309 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L180 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:38,672 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2022-02-20 18:12:38,677 WARN L170 areAnnotationChecker]: L291-2 has no Hoare annotation [2022-02-20 18:12:38,677 WARN L170 areAnnotationChecker]: L225 has no Hoare annotation [2022-02-20 18:12:38,678 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:38,678 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:12:38,678 WARN L170 areAnnotationChecker]: L362 has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: L182-1 has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: L509 has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: L373-1 has no Hoare annotation [2022-02-20 18:12:38,681 WARN L170 areAnnotationChecker]: L373-1 has no Hoare annotation [2022-02-20 18:12:38,682 WARN L170 areAnnotationChecker]: L517 has no Hoare annotation [2022-02-20 18:12:38,682 WARN L170 areAnnotationChecker]: L517 has no Hoare annotation [2022-02-20 18:12:38,682 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-02-20 18:12:38,682 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2022-02-20 18:12:38,682 WARN L170 areAnnotationChecker]: L517-1 has no Hoare annotation [2022-02-20 18:12:38,687 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:12:38,752 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:12:38 BoogieIcfgContainer [2022-02-20 18:12:38,753 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:12:38,754 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:12:38,754 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:12:38,754 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:12:38,755 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58" (3/4) ... [2022-02-20 18:12:38,757 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:12:38,764 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:12:38,764 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:12:38,764 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:12:38,764 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:12:38,765 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:38,765 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:12:38,765 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:12:38,777 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-02-20 18:12:38,777 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:12:38,778 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:12:38,778 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:12:38,778 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:12:38,779 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:38,779 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:38,804 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:38,805 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || (((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && !(2 <= tmp)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,806 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,807 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-02-20 18:12:38,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:38,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:38,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-02-20 18:12:38,808 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2022-02-20 18:12:38,841 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:12:38,841 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:12:38,843 INFO L158 Benchmark]: Toolchain (without parser) took 41772.39ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 66.5MB in the beginning and 167.9MB in the end (delta: -101.4MB). Peak memory consumption was 9.4MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,843 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 81.8MB. Free memory was 36.6MB in the beginning and 36.5MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:38,844 INFO L158 Benchmark]: CACSL2BoogieTranslator took 520.22ms. Allocated memory is still 98.6MB. Free memory was 66.5MB in the beginning and 61.9MB in the end (delta: 4.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,844 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.65ms. Allocated memory is still 98.6MB. Free memory was 61.9MB in the beginning and 59.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,844 INFO L158 Benchmark]: Boogie Preprocessor took 43.82ms. Allocated memory is still 98.6MB. Free memory was 59.3MB in the beginning and 57.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,845 INFO L158 Benchmark]: RCFGBuilder took 546.92ms. Allocated memory is still 98.6MB. Free memory was 57.3MB in the beginning and 64.8MB in the end (delta: -7.5MB). Peak memory consumption was 14.0MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,845 INFO L158 Benchmark]: TraceAbstraction took 40497.70ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 64.2MB in the beginning and 173.1MB in the end (delta: -108.9MB). Peak memory consumption was 124.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,845 INFO L158 Benchmark]: Witness Printer took 87.65ms. Allocated memory is still 209.7MB. Free memory was 173.1MB in the beginning and 167.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-02-20 18:12:38,847 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 81.8MB. Free memory was 36.6MB in the beginning and 36.5MB in the end (delta: 83.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 520.22ms. Allocated memory is still 98.6MB. Free memory was 66.5MB in the beginning and 61.9MB in the end (delta: 4.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.65ms. Allocated memory is still 98.6MB. Free memory was 61.9MB in the beginning and 59.3MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.82ms. Allocated memory is still 98.6MB. Free memory was 59.3MB in the beginning and 57.7MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 546.92ms. Allocated memory is still 98.6MB. Free memory was 57.3MB in the beginning and 64.8MB in the end (delta: -7.5MB). Peak memory consumption was 14.0MB. Max. memory is 16.1GB. * TraceAbstraction took 40497.70ms. Allocated memory was 98.6MB in the beginning and 209.7MB in the end (delta: 111.1MB). Free memory was 64.2MB in the beginning and 173.1MB in the end (delta: -108.9MB). Peak memory consumption was 124.1MB. Max. memory is 16.1GB. * Witness Printer took 87.65ms. Allocated memory is still 209.7MB. Free memory was 173.1MB in the beginning and 167.9MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 309]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 90 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 40.3s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 19.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.8s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2852 SdHoareTripleChecker+Valid, 5.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2808 mSDsluCounter, 5383 SdHoareTripleChecker+Invalid, 5.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3897 mSDsCounter, 1017 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4460 IncrementalHoareTripleChecker+Invalid, 5477 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1017 mSolverCounterUnsat, 1486 mSDtfsCounter, 4460 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 878 GetRequests, 681 SyntacticMatches, 6 SemanticMatches, 191 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1396 ImplicationChecksByTransitivity, 1.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=997occurred in iteration=10, InterpolantAutomatonStates: 165, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 248 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 2350 PreInvPairs, 2771 NumberOfFragments, 4007 HoareAnnotationTreeSize, 2350 FomulaSimplifications, 3779 FormulaSimplificationTreeSizeReduction, 2.8s HoareSimplificationTime, 42 FomulaSimplificationsInter, 44008 FormulaSimplificationTreeSizeReductionInter, 8.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 5.0s InterpolantComputationTime, 1073 NumberOfCodeBlocks, 1073 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1324 ConstructedInterpolants, 0 QuantifiedInterpolants, 2837 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1138 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 789/875 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 136]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 497]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || (((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && !(2 <= tmp)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) && ((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || !(methaneLevelCritical == 0))) && ((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(2 <= \old(waterLevel))) || \old(switchedOnBeforeTS) == 0) && (((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))))) || ((((((((((\result <= waterLevel && methaneLevelCritical == \result) && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS))) && (((((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) <= 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result < 2) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) == 2)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 59]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((((methaneLevelCritical == \result && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && !(methaneLevelCritical == 0)) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 573]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:12:38,913 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE