./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash df3faf2d1bbcaed92e1c2eddcb5ae1d2459730e99808e363d537a0bc5d54e347 --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-20 18:11:56,624 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-20 18:11:56,627 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-20 18:11:56,662 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-20 18:11:56,663 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-20 18:11:56,666 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-20 18:11:56,667 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-20 18:11:56,669 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-20 18:11:56,671 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-20 18:11:56,674 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-20 18:11:56,675 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-20 18:11:56,676 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-20 18:11:56,677 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-20 18:11:56,678 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-20 18:11:56,680 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-20 18:11:56,682 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-20 18:11:56,683 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-20 18:11:56,683 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-20 18:11:56,685 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-20 18:11:56,689 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-20 18:11:56,690 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-20 18:11:56,691 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-20 18:11:56,692 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-20 18:11:56,693 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-20 18:11:56,697 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-20 18:11:56,697 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-20 18:11:56,698 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-20 18:11:56,699 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-20 18:11:56,699 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-20 18:11:56,700 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-20 18:11:56,700 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-20 18:11:56,701 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-20 18:11:56,702 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-20 18:11:56,703 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-20 18:11:56,703 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-20 18:11:56,704 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-20 18:11:56,704 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-20 18:11:56,704 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-20 18:11:56,704 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-20 18:11:56,706 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-20 18:11:56,706 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-20 18:11:56,707 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-02-20 18:11:56,732 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-20 18:11:56,732 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-20 18:11:56,732 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-20 18:11:56,733 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-20 18:11:56,733 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-20 18:11:56,733 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-20 18:11:56,734 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-20 18:11:56,734 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-20 18:11:56,734 INFO L138 SettingsManager]: * Use SBE=true [2022-02-20 18:11:56,734 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-20 18:11:56,735 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-20 18:11:56,735 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-20 18:11:56,735 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-20 18:11:56,735 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-20 18:11:56,735 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-02-20 18:11:56,736 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-20 18:11:56,736 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:56,737 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-20 18:11:56,737 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-20 18:11:56,738 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2022-02-20 18:11:56,738 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-02-20 18:11:56,738 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-02-20 18:11:56,738 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> df3faf2d1bbcaed92e1c2eddcb5ae1d2459730e99808e363d537a0bc5d54e347 [2022-02-20 18:11:56,947 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-20 18:11:56,964 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-20 18:11:56,965 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-20 18:11:56,966 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-20 18:11:56,967 INFO L275 PluginConnector]: CDTParser initialized [2022-02-20 18:11:56,968 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2022-02-20 18:11:57,018 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/783cd04df/0f7606c08e2848dd84937e9f29ed4b3f/FLAG62a2b8197 [2022-02-20 18:11:57,396 INFO L306 CDTParser]: Found 1 translation units. [2022-02-20 18:11:57,396 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c [2022-02-20 18:11:57,410 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/783cd04df/0f7606c08e2848dd84937e9f29ed4b3f/FLAG62a2b8197 [2022-02-20 18:11:57,798 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/783cd04df/0f7606c08e2848dd84937e9f29ed4b3f [2022-02-20 18:11:57,803 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-20 18:11:57,805 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-20 18:11:57,808 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:57,808 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-20 18:11:57,810 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-20 18:11:57,811 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,812 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@70eae677 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:57, skipping insertion in model container [2022-02-20 18:11:57,812 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.02 06:11:57" (1/1) ... [2022-02-20 18:11:57,818 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-20 18:11:57,863 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-20 18:11:57,998 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c[1605,1618] [2022-02-20 18:11:58,119 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:58,126 INFO L203 MainTranslator]: Completed pre-run [2022-02-20 18:11:58,135 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec5_product39.cil.c[1605,1618] [2022-02-20 18:11:58,217 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-20 18:11:58,230 INFO L208 MainTranslator]: Completed translation [2022-02-20 18:11:58,230 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58 WrapperNode [2022-02-20 18:11:58,230 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-20 18:11:58,234 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:58,234 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-20 18:11:58,234 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-20 18:11:58,239 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,260 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,297 INFO L137 Inliner]: procedures = 56, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 259 [2022-02-20 18:11:58,298 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-20 18:11:58,299 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-20 18:11:58,299 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-20 18:11:58,299 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-20 18:11:58,305 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,305 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,307 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,307 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,312 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,330 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,332 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,333 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-20 18:11:58,334 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-20 18:11:58,334 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-20 18:11:58,334 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-20 18:11:58,335 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (1/1) ... [2022-02-20 18:11:58,340 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-20 18:11:58,350 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:11:58,362 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-20 18:11:58,364 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-20 18:11:58,404 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-20 18:11:58,405 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-02-20 18:11:58,405 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-02-20 18:11:58,405 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-02-20 18:11:58,405 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-02-20 18:11:58,406 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-02-20 18:11:58,406 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-02-20 18:11:58,406 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:58,410 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:11:58,410 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-02-20 18:11:58,411 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-02-20 18:11:58,411 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-02-20 18:11:58,411 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-02-20 18:11:58,411 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-02-20 18:11:58,411 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-02-20 18:11:58,411 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-20 18:11:58,411 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-02-20 18:11:58,411 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-02-20 18:11:58,412 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-20 18:11:58,412 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-20 18:11:58,470 INFO L234 CfgBuilder]: Building ICFG [2022-02-20 18:11:58,472 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-20 18:11:58,907 INFO L275 CfgBuilder]: Performing block encoding [2022-02-20 18:11:58,914 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-20 18:11:58,915 INFO L299 CfgBuilder]: Removed 2 assume(true) statements. [2022-02-20 18:11:58,916 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58 BoogieIcfgContainer [2022-02-20 18:11:58,916 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-20 18:11:58,918 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-20 18:11:58,918 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-20 18:11:58,921 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-20 18:11:58,921 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.02 06:11:57" (1/3) ... [2022-02-20 18:11:58,922 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c136fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:58, skipping insertion in model container [2022-02-20 18:11:58,922 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.02 06:11:58" (2/3) ... [2022-02-20 18:11:58,922 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c136fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.02 06:11:58, skipping insertion in model container [2022-02-20 18:11:58,922 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58" (3/3) ... [2022-02-20 18:11:58,923 INFO L111 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product39.cil.c [2022-02-20 18:11:58,929 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-20 18:11:58,930 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-02-20 18:11:58,963 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-20 18:11:58,968 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-20 18:11:58,968 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-02-20 18:11:58,984 INFO L276 IsEmpty]: Start isEmpty. Operand has 97 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-02-20 18:11:58,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-20 18:11:58,990 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:58,991 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:58,991 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:58,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:58,995 INFO L85 PathProgramCache]: Analyzing trace with hash -1244587252, now seen corresponding path program 1 times [2022-02-20 18:11:59,002 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,002 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [775794535] [2022-02-20 18:11:59,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:59,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-20 18:11:59,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,164 INFO L290 TraceCheckUtils]: 0: Hoare triple {100#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {100#true} is VALID [2022-02-20 18:11:59,165 INFO L290 TraceCheckUtils]: 1: Hoare triple {100#true} assume true; {100#true} is VALID [2022-02-20 18:11:59,165 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {100#true} {101#false} #247#return; {101#false} is VALID [2022-02-20 18:11:59,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:11:59,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,189 INFO L290 TraceCheckUtils]: 0: Hoare triple {100#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {100#true} is VALID [2022-02-20 18:11:59,190 INFO L290 TraceCheckUtils]: 1: Hoare triple {100#true} assume true; {100#true} is VALID [2022-02-20 18:11:59,190 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {100#true} {101#false} #255#return; {101#false} is VALID [2022-02-20 18:11:59,191 INFO L290 TraceCheckUtils]: 0: Hoare triple {100#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {100#true} is VALID [2022-02-20 18:11:59,195 INFO L290 TraceCheckUtils]: 1: Hoare triple {100#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {100#true} is VALID [2022-02-20 18:11:59,195 INFO L290 TraceCheckUtils]: 2: Hoare triple {100#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {100#true} is VALID [2022-02-20 18:11:59,195 INFO L290 TraceCheckUtils]: 3: Hoare triple {100#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {100#true} is VALID [2022-02-20 18:11:59,196 INFO L290 TraceCheckUtils]: 4: Hoare triple {100#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {100#true} is VALID [2022-02-20 18:11:59,196 INFO L290 TraceCheckUtils]: 5: Hoare triple {100#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {100#true} is VALID [2022-02-20 18:11:59,196 INFO L290 TraceCheckUtils]: 6: Hoare triple {100#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {100#true} is VALID [2022-02-20 18:11:59,196 INFO L290 TraceCheckUtils]: 7: Hoare triple {100#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {100#true} is VALID [2022-02-20 18:11:59,197 INFO L290 TraceCheckUtils]: 8: Hoare triple {100#true} assume false; {101#false} is VALID [2022-02-20 18:11:59,197 INFO L272 TraceCheckUtils]: 9: Hoare triple {101#false} call cleanup(); {101#false} is VALID [2022-02-20 18:11:59,198 INFO L290 TraceCheckUtils]: 10: Hoare triple {101#false} havoc ~i~0;havoc ~__cil_tmp2~0; {101#false} is VALID [2022-02-20 18:11:59,198 INFO L272 TraceCheckUtils]: 11: Hoare triple {101#false} call timeShift(); {101#false} is VALID [2022-02-20 18:11:59,199 INFO L290 TraceCheckUtils]: 12: Hoare triple {101#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {101#false} is VALID [2022-02-20 18:11:59,199 INFO L272 TraceCheckUtils]: 13: Hoare triple {101#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {100#true} is VALID [2022-02-20 18:11:59,199 INFO L290 TraceCheckUtils]: 14: Hoare triple {100#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {100#true} is VALID [2022-02-20 18:11:59,199 INFO L290 TraceCheckUtils]: 15: Hoare triple {100#true} assume true; {100#true} is VALID [2022-02-20 18:11:59,200 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {100#true} {101#false} #247#return; {101#false} is VALID [2022-02-20 18:11:59,201 INFO L290 TraceCheckUtils]: 17: Hoare triple {101#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {101#false} is VALID [2022-02-20 18:11:59,201 INFO L290 TraceCheckUtils]: 18: Hoare triple {101#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {101#false} is VALID [2022-02-20 18:11:59,201 INFO L290 TraceCheckUtils]: 19: Hoare triple {101#false} assume !(0 != ~pumpRunning~0); {101#false} is VALID [2022-02-20 18:11:59,201 INFO L290 TraceCheckUtils]: 20: Hoare triple {101#false} assume !(0 != ~systemActive~0); {101#false} is VALID [2022-02-20 18:11:59,202 INFO L290 TraceCheckUtils]: 21: Hoare triple {101#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {101#false} is VALID [2022-02-20 18:11:59,202 INFO L290 TraceCheckUtils]: 22: Hoare triple {101#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {101#false} is VALID [2022-02-20 18:11:59,202 INFO L290 TraceCheckUtils]: 23: Hoare triple {101#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {101#false} is VALID [2022-02-20 18:11:59,202 INFO L272 TraceCheckUtils]: 24: Hoare triple {101#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {100#true} is VALID [2022-02-20 18:11:59,202 INFO L290 TraceCheckUtils]: 25: Hoare triple {100#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {100#true} is VALID [2022-02-20 18:11:59,203 INFO L290 TraceCheckUtils]: 26: Hoare triple {100#true} assume true; {100#true} is VALID [2022-02-20 18:11:59,203 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {100#true} {101#false} #255#return; {101#false} is VALID [2022-02-20 18:11:59,203 INFO L290 TraceCheckUtils]: 28: Hoare triple {101#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {101#false} is VALID [2022-02-20 18:11:59,204 INFO L290 TraceCheckUtils]: 29: Hoare triple {101#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {101#false} is VALID [2022-02-20 18:11:59,204 INFO L290 TraceCheckUtils]: 30: Hoare triple {101#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {101#false} is VALID [2022-02-20 18:11:59,205 INFO L290 TraceCheckUtils]: 31: Hoare triple {101#false} assume !false; {101#false} is VALID [2022-02-20 18:11:59,205 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:59,206 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:59,206 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [775794535] [2022-02-20 18:11:59,206 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [775794535] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:59,207 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:59,207 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-20 18:11:59,208 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484164909] [2022-02-20 18:11:59,209 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:59,213 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:59,216 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:59,219 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,260 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,261 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-02-20 18:11:59,262 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:59,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-02-20 18:11:59,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:59,287 INFO L87 Difference]: Start difference. First operand has 97 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,385 INFO L93 Difference]: Finished difference Result 185 states and 250 transitions. [2022-02-20 18:11:59,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-02-20 18:11:59,385 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-02-20 18:11:59,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:59,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 250 transitions. [2022-02-20 18:11:59,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 250 transitions. [2022-02-20 18:11:59,429 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 250 transitions. [2022-02-20 18:11:59,597 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,606 INFO L225 Difference]: With dead ends: 185 [2022-02-20 18:11:59,606 INFO L226 Difference]: Without dead ends: 88 [2022-02-20 18:11:59,609 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-02-20 18:11:59,611 INFO L933 BasicCegarLoop]: 122 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:11:59,612 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:11:59,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-02-20 18:11:59,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-02-20 18:11:59,637 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:11:59,638 INFO L82 GeneralOperation]: Start isEquivalent. First operand 88 states. Second operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:59,639 INFO L74 IsIncluded]: Start isIncluded. First operand 88 states. Second operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:59,639 INFO L87 Difference]: Start difference. First operand 88 states. Second operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:59,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,645 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2022-02-20 18:11:59,645 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2022-02-20 18:11:59,646 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,646 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,647 INFO L74 IsIncluded]: Start isIncluded. First operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 88 states. [2022-02-20 18:11:59,647 INFO L87 Difference]: Start difference. First operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) Second operand 88 states. [2022-02-20 18:11:59,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,652 INFO L93 Difference]: Finished difference Result 88 states and 113 transitions. [2022-02-20 18:11:59,652 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2022-02-20 18:11:59,653 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:11:59,653 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:11:59,653 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:11:59,653 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:11:59,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-02-20 18:11:59,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 113 transitions. [2022-02-20 18:11:59,658 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 113 transitions. Word has length 32 [2022-02-20 18:11:59,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:11:59,659 INFO L470 AbstractCegarLoop]: Abstraction has 88 states and 113 transitions. [2022-02-20 18:11:59,659 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,660 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 113 transitions. [2022-02-20 18:11:59,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-02-20 18:11:59,661 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:11:59,662 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:11:59,662 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-20 18:11:59,662 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:11:59,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:11:59,663 INFO L85 PathProgramCache]: Analyzing trace with hash 1577409017, now seen corresponding path program 1 times [2022-02-20 18:11:59,663 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:11:59,663 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858044096] [2022-02-20 18:11:59,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:11:59,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:11:59,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-02-20 18:11:59,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,753 INFO L290 TraceCheckUtils]: 0: Hoare triple {683#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {683#true} is VALID [2022-02-20 18:11:59,754 INFO L290 TraceCheckUtils]: 1: Hoare triple {683#true} assume true; {683#true} is VALID [2022-02-20 18:11:59,754 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {683#true} {684#false} #247#return; {684#false} is VALID [2022-02-20 18:11:59,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-02-20 18:11:59,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:11:59,759 INFO L290 TraceCheckUtils]: 0: Hoare triple {683#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {683#true} is VALID [2022-02-20 18:11:59,763 INFO L290 TraceCheckUtils]: 1: Hoare triple {683#true} assume true; {683#true} is VALID [2022-02-20 18:11:59,763 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {683#true} {684#false} #255#return; {684#false} is VALID [2022-02-20 18:11:59,764 INFO L290 TraceCheckUtils]: 0: Hoare triple {683#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {683#true} is VALID [2022-02-20 18:11:59,764 INFO L290 TraceCheckUtils]: 1: Hoare triple {683#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {683#true} is VALID [2022-02-20 18:11:59,764 INFO L290 TraceCheckUtils]: 2: Hoare triple {683#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {683#true} is VALID [2022-02-20 18:11:59,764 INFO L290 TraceCheckUtils]: 3: Hoare triple {683#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {683#true} is VALID [2022-02-20 18:11:59,765 INFO L290 TraceCheckUtils]: 4: Hoare triple {683#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {683#true} is VALID [2022-02-20 18:11:59,765 INFO L290 TraceCheckUtils]: 5: Hoare triple {683#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {683#true} is VALID [2022-02-20 18:11:59,765 INFO L290 TraceCheckUtils]: 6: Hoare triple {683#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {683#true} is VALID [2022-02-20 18:11:59,766 INFO L290 TraceCheckUtils]: 7: Hoare triple {683#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {685#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:59,766 INFO L290 TraceCheckUtils]: 8: Hoare triple {685#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !false; {685#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} is VALID [2022-02-20 18:11:59,766 INFO L290 TraceCheckUtils]: 9: Hoare triple {685#(= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)} assume !(test_~splverifierCounter~0#1 < 4); {684#false} is VALID [2022-02-20 18:11:59,767 INFO L272 TraceCheckUtils]: 10: Hoare triple {684#false} call cleanup(); {684#false} is VALID [2022-02-20 18:11:59,767 INFO L290 TraceCheckUtils]: 11: Hoare triple {684#false} havoc ~i~0;havoc ~__cil_tmp2~0; {684#false} is VALID [2022-02-20 18:11:59,768 INFO L272 TraceCheckUtils]: 12: Hoare triple {684#false} call timeShift(); {684#false} is VALID [2022-02-20 18:11:59,768 INFO L290 TraceCheckUtils]: 13: Hoare triple {684#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {684#false} is VALID [2022-02-20 18:11:59,768 INFO L272 TraceCheckUtils]: 14: Hoare triple {684#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {683#true} is VALID [2022-02-20 18:11:59,768 INFO L290 TraceCheckUtils]: 15: Hoare triple {683#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {683#true} is VALID [2022-02-20 18:11:59,769 INFO L290 TraceCheckUtils]: 16: Hoare triple {683#true} assume true; {683#true} is VALID [2022-02-20 18:11:59,769 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {683#true} {684#false} #247#return; {684#false} is VALID [2022-02-20 18:11:59,770 INFO L290 TraceCheckUtils]: 18: Hoare triple {684#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {684#false} is VALID [2022-02-20 18:11:59,770 INFO L290 TraceCheckUtils]: 19: Hoare triple {684#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {684#false} is VALID [2022-02-20 18:11:59,770 INFO L290 TraceCheckUtils]: 20: Hoare triple {684#false} assume !(0 != ~pumpRunning~0); {684#false} is VALID [2022-02-20 18:11:59,771 INFO L290 TraceCheckUtils]: 21: Hoare triple {684#false} assume !(0 != ~systemActive~0); {684#false} is VALID [2022-02-20 18:11:59,771 INFO L290 TraceCheckUtils]: 22: Hoare triple {684#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {684#false} is VALID [2022-02-20 18:11:59,771 INFO L290 TraceCheckUtils]: 23: Hoare triple {684#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {684#false} is VALID [2022-02-20 18:11:59,771 INFO L290 TraceCheckUtils]: 24: Hoare triple {684#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {684#false} is VALID [2022-02-20 18:11:59,771 INFO L272 TraceCheckUtils]: 25: Hoare triple {684#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {683#true} is VALID [2022-02-20 18:11:59,772 INFO L290 TraceCheckUtils]: 26: Hoare triple {683#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {683#true} is VALID [2022-02-20 18:11:59,772 INFO L290 TraceCheckUtils]: 27: Hoare triple {683#true} assume true; {683#true} is VALID [2022-02-20 18:11:59,772 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {683#true} {684#false} #255#return; {684#false} is VALID [2022-02-20 18:11:59,772 INFO L290 TraceCheckUtils]: 29: Hoare triple {684#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {684#false} is VALID [2022-02-20 18:11:59,775 INFO L290 TraceCheckUtils]: 30: Hoare triple {684#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {684#false} is VALID [2022-02-20 18:11:59,775 INFO L290 TraceCheckUtils]: 31: Hoare triple {684#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {684#false} is VALID [2022-02-20 18:11:59,776 INFO L290 TraceCheckUtils]: 32: Hoare triple {684#false} assume !false; {684#false} is VALID [2022-02-20 18:11:59,776 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:11:59,776 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:11:59,776 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858044096] [2022-02-20 18:11:59,776 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858044096] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:11:59,777 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:11:59,777 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:11:59,777 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1520633608] [2022-02-20 18:11:59,777 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:11:59,779 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:11:59,779 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:11:59,779 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,800 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:11:59,800 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:11:59,801 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:11:59,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:11:59,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:11:59,802 INFO L87 Difference]: Start difference. First operand 88 states and 113 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:11:59,882 INFO L93 Difference]: Finished difference Result 137 states and 175 transitions. [2022-02-20 18:11:59,882 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:11:59,882 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-02-20 18:11:59,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:11:59,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 175 transitions. [2022-02-20 18:11:59,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:11:59,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 175 transitions. [2022-02-20 18:11:59,889 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 175 transitions. [2022-02-20 18:12:00,000 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 175 edges. 175 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,003 INFO L225 Difference]: With dead ends: 137 [2022-02-20 18:12:00,003 INFO L226 Difference]: Without dead ends: 79 [2022-02-20 18:12:00,004 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:00,005 INFO L933 BasicCegarLoop]: 100 mSDtfsCounter, 16 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:00,006 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [20 Valid, 179 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:00,006 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-02-20 18:12:00,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-02-20 18:12:00,011 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:00,011 INFO L82 GeneralOperation]: Start isEquivalent. First operand 79 states. Second operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:00,012 INFO L74 IsIncluded]: Start isIncluded. First operand 79 states. Second operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:00,012 INFO L87 Difference]: Start difference. First operand 79 states. Second operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:00,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,015 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-02-20 18:12:00,015 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 101 transitions. [2022-02-20 18:12:00,016 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,016 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,016 INFO L74 IsIncluded]: Start isIncluded. First operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 79 states. [2022-02-20 18:12:00,017 INFO L87 Difference]: Start difference. First operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) Second operand 79 states. [2022-02-20 18:12:00,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,019 INFO L93 Difference]: Finished difference Result 79 states and 101 transitions. [2022-02-20 18:12:00,019 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 101 transitions. [2022-02-20 18:12:00,020 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,020 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,020 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:00,020 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:00,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-02-20 18:12:00,023 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 101 transitions. [2022-02-20 18:12:00,023 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 101 transitions. Word has length 33 [2022-02-20 18:12:00,023 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:00,023 INFO L470 AbstractCegarLoop]: Abstraction has 79 states and 101 transitions. [2022-02-20 18:12:00,024 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:00,024 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 101 transitions. [2022-02-20 18:12:00,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-02-20 18:12:00,025 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:00,025 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:00,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-20 18:12:00,026 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:00,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:00,026 INFO L85 PathProgramCache]: Analyzing trace with hash 1563484802, now seen corresponding path program 1 times [2022-02-20 18:12:00,026 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:00,027 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [280685172] [2022-02-20 18:12:00,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:00,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:00,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:00,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,092 INFO L290 TraceCheckUtils]: 0: Hoare triple {1165#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1165#true} is VALID [2022-02-20 18:12:00,093 INFO L290 TraceCheckUtils]: 1: Hoare triple {1165#true} assume true; {1165#true} is VALID [2022-02-20 18:12:00,093 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1165#true} {1167#(= 1 ~systemActive~0)} #247#return; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-02-20 18:12:00,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,097 INFO L290 TraceCheckUtils]: 0: Hoare triple {1165#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1165#true} is VALID [2022-02-20 18:12:00,097 INFO L290 TraceCheckUtils]: 1: Hoare triple {1165#true} assume true; {1165#true} is VALID [2022-02-20 18:12:00,097 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1165#true} {1166#false} #255#return; {1166#false} is VALID [2022-02-20 18:12:00,099 INFO L290 TraceCheckUtils]: 0: Hoare triple {1165#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,100 INFO L290 TraceCheckUtils]: 1: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,100 INFO L290 TraceCheckUtils]: 2: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,100 INFO L290 TraceCheckUtils]: 3: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,101 INFO L290 TraceCheckUtils]: 4: Hoare triple {1167#(= 1 ~systemActive~0)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,101 INFO L290 TraceCheckUtils]: 5: Hoare triple {1167#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,102 INFO L290 TraceCheckUtils]: 6: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,102 INFO L290 TraceCheckUtils]: 7: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,102 INFO L290 TraceCheckUtils]: 8: Hoare triple {1167#(= 1 ~systemActive~0)} assume !false; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,103 INFO L290 TraceCheckUtils]: 9: Hoare triple {1167#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,103 INFO L290 TraceCheckUtils]: 10: Hoare triple {1167#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,104 INFO L290 TraceCheckUtils]: 11: Hoare triple {1167#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~4#1); {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,104 INFO L290 TraceCheckUtils]: 12: Hoare triple {1167#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,105 INFO L290 TraceCheckUtils]: 13: Hoare triple {1167#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,105 INFO L290 TraceCheckUtils]: 14: Hoare triple {1167#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,105 INFO L290 TraceCheckUtils]: 15: Hoare triple {1167#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,106 INFO L272 TraceCheckUtils]: 16: Hoare triple {1167#(= 1 ~systemActive~0)} call timeShift(); {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,106 INFO L290 TraceCheckUtils]: 17: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,106 INFO L272 TraceCheckUtils]: 18: Hoare triple {1167#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {1165#true} is VALID [2022-02-20 18:12:00,107 INFO L290 TraceCheckUtils]: 19: Hoare triple {1165#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1165#true} is VALID [2022-02-20 18:12:00,107 INFO L290 TraceCheckUtils]: 20: Hoare triple {1165#true} assume true; {1165#true} is VALID [2022-02-20 18:12:00,107 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {1165#true} {1167#(= 1 ~systemActive~0)} #247#return; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,108 INFO L290 TraceCheckUtils]: 22: Hoare triple {1167#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,108 INFO L290 TraceCheckUtils]: 23: Hoare triple {1167#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,109 INFO L290 TraceCheckUtils]: 24: Hoare triple {1167#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1167#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:00,109 INFO L290 TraceCheckUtils]: 25: Hoare triple {1167#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1166#false} is VALID [2022-02-20 18:12:00,109 INFO L290 TraceCheckUtils]: 26: Hoare triple {1166#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {1166#false} is VALID [2022-02-20 18:12:00,109 INFO L290 TraceCheckUtils]: 27: Hoare triple {1166#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {1166#false} is VALID [2022-02-20 18:12:00,110 INFO L290 TraceCheckUtils]: 28: Hoare triple {1166#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {1166#false} is VALID [2022-02-20 18:12:00,110 INFO L272 TraceCheckUtils]: 29: Hoare triple {1166#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {1165#true} is VALID [2022-02-20 18:12:00,110 INFO L290 TraceCheckUtils]: 30: Hoare triple {1165#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1165#true} is VALID [2022-02-20 18:12:00,110 INFO L290 TraceCheckUtils]: 31: Hoare triple {1165#true} assume true; {1165#true} is VALID [2022-02-20 18:12:00,110 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {1165#true} {1166#false} #255#return; {1166#false} is VALID [2022-02-20 18:12:00,111 INFO L290 TraceCheckUtils]: 33: Hoare triple {1166#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {1166#false} is VALID [2022-02-20 18:12:00,111 INFO L290 TraceCheckUtils]: 34: Hoare triple {1166#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {1166#false} is VALID [2022-02-20 18:12:00,111 INFO L290 TraceCheckUtils]: 35: Hoare triple {1166#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1166#false} is VALID [2022-02-20 18:12:00,111 INFO L290 TraceCheckUtils]: 36: Hoare triple {1166#false} assume !false; {1166#false} is VALID [2022-02-20 18:12:00,112 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:00,112 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:00,112 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [280685172] [2022-02-20 18:12:00,112 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [280685172] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:00,112 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:00,112 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-20 18:12:00,113 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1147889599] [2022-02-20 18:12:00,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:00,113 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:00,114 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:00,114 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,152 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,153 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-20 18:12:00,153 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:00,153 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-20 18:12:00,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:00,154 INFO L87 Difference]: Start difference. First operand 79 states and 101 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,301 INFO L93 Difference]: Finished difference Result 220 states and 287 transitions. [2022-02-20 18:12:00,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-20 18:12:00,302 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-02-20 18:12:00,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:00,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 287 transitions. [2022-02-20 18:12:00,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 287 transitions. [2022-02-20 18:12:00,312 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 287 transitions. [2022-02-20 18:12:00,529 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 287 edges. 287 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,535 INFO L225 Difference]: With dead ends: 220 [2022-02-20 18:12:00,536 INFO L226 Difference]: Without dead ends: 149 [2022-02-20 18:12:00,537 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-20 18:12:00,542 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 76 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:00,543 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [76 Valid, 214 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:00,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-02-20 18:12:00,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 146. [2022-02-20 18:12:00,563 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:00,564 INFO L82 GeneralOperation]: Start isEquivalent. First operand 149 states. Second operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:12:00,564 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:12:00,565 INFO L87 Difference]: Start difference. First operand 149 states. Second operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:12:00,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,569 INFO L93 Difference]: Finished difference Result 149 states and 192 transitions. [2022-02-20 18:12:00,569 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 192 transitions. [2022-02-20 18:12:00,570 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,570 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,571 INFO L74 IsIncluded]: Start isIncluded. First operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) Second operand 149 states. [2022-02-20 18:12:00,571 INFO L87 Difference]: Start difference. First operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) Second operand 149 states. [2022-02-20 18:12:00,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:00,576 INFO L93 Difference]: Finished difference Result 149 states and 192 transitions. [2022-02-20 18:12:00,576 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 192 transitions. [2022-02-20 18:12:00,576 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:00,576 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:00,576 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:00,576 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:00,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 109 states have (on average 1.3394495412844036) internal successors, (146), 124 states have internal predecessors, (146), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-02-20 18:12:00,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 190 transitions. [2022-02-20 18:12:00,582 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 190 transitions. Word has length 37 [2022-02-20 18:12:00,582 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:00,582 INFO L470 AbstractCegarLoop]: Abstraction has 146 states and 190 transitions. [2022-02-20 18:12:00,582 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-20 18:12:00,582 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 190 transitions. [2022-02-20 18:12:00,583 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-20 18:12:00,583 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:00,583 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:00,583 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-20 18:12:00,583 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:00,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:00,584 INFO L85 PathProgramCache]: Analyzing trace with hash 209384056, now seen corresponding path program 1 times [2022-02-20 18:12:00,584 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:00,584 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476017269] [2022-02-20 18:12:00,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:00,584 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:00,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:00,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,662 INFO L290 TraceCheckUtils]: 0: Hoare triple {1998#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1998#true} is VALID [2022-02-20 18:12:00,662 INFO L290 TraceCheckUtils]: 1: Hoare triple {1998#true} assume true; {1998#true} is VALID [2022-02-20 18:12:00,663 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {1998#true} {2000#(= ~pumpRunning~0 0)} #247#return; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,663 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-02-20 18:12:00,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:00,671 INFO L290 TraceCheckUtils]: 0: Hoare triple {1998#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:00,672 INFO L290 TraceCheckUtils]: 1: Hoare triple {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:00,673 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} {2000#(= ~pumpRunning~0 0)} #255#return; {2007#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret24#1|)} is VALID [2022-02-20 18:12:00,673 INFO L290 TraceCheckUtils]: 0: Hoare triple {1998#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,673 INFO L290 TraceCheckUtils]: 1: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,674 INFO L290 TraceCheckUtils]: 2: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,674 INFO L290 TraceCheckUtils]: 3: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,674 INFO L290 TraceCheckUtils]: 4: Hoare triple {2000#(= ~pumpRunning~0 0)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,675 INFO L290 TraceCheckUtils]: 5: Hoare triple {2000#(= ~pumpRunning~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,675 INFO L290 TraceCheckUtils]: 6: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,676 INFO L290 TraceCheckUtils]: 7: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,676 INFO L290 TraceCheckUtils]: 8: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !false; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,676 INFO L290 TraceCheckUtils]: 9: Hoare triple {2000#(= ~pumpRunning~0 0)} assume test_~splverifierCounter~0#1 < 4; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,677 INFO L290 TraceCheckUtils]: 10: Hoare triple {2000#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,677 INFO L290 TraceCheckUtils]: 11: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp~4#1); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,677 INFO L290 TraceCheckUtils]: 12: Hoare triple {2000#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,678 INFO L290 TraceCheckUtils]: 13: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___0~1#1); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,678 INFO L290 TraceCheckUtils]: 14: Hoare triple {2000#(= ~pumpRunning~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,678 INFO L290 TraceCheckUtils]: 15: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,679 INFO L290 TraceCheckUtils]: 16: Hoare triple {2000#(= ~pumpRunning~0 0)} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,679 INFO L290 TraceCheckUtils]: 17: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,679 INFO L290 TraceCheckUtils]: 18: Hoare triple {2000#(= ~pumpRunning~0 0)} ~systemActive~0 := 0; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,680 INFO L290 TraceCheckUtils]: 19: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline_stopSystem } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,680 INFO L272 TraceCheckUtils]: 20: Hoare triple {2000#(= ~pumpRunning~0 0)} call timeShift(); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,680 INFO L290 TraceCheckUtils]: 21: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,680 INFO L272 TraceCheckUtils]: 22: Hoare triple {2000#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {1998#true} is VALID [2022-02-20 18:12:00,680 INFO L290 TraceCheckUtils]: 23: Hoare triple {1998#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {1998#true} is VALID [2022-02-20 18:12:00,681 INFO L290 TraceCheckUtils]: 24: Hoare triple {1998#true} assume true; {1998#true} is VALID [2022-02-20 18:12:00,681 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {1998#true} {2000#(= ~pumpRunning~0 0)} #247#return; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,681 INFO L290 TraceCheckUtils]: 26: Hoare triple {2000#(= ~pumpRunning~0 0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,682 INFO L290 TraceCheckUtils]: 27: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,682 INFO L290 TraceCheckUtils]: 28: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != ~pumpRunning~0); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,682 INFO L290 TraceCheckUtils]: 29: Hoare triple {2000#(= ~pumpRunning~0 0)} assume !(0 != ~systemActive~0); {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,683 INFO L290 TraceCheckUtils]: 30: Hoare triple {2000#(= ~pumpRunning~0 0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,683 INFO L290 TraceCheckUtils]: 31: Hoare triple {2000#(= ~pumpRunning~0 0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,683 INFO L290 TraceCheckUtils]: 32: Hoare triple {2000#(= ~pumpRunning~0 0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {2000#(= ~pumpRunning~0 0)} is VALID [2022-02-20 18:12:00,683 INFO L272 TraceCheckUtils]: 33: Hoare triple {2000#(= ~pumpRunning~0 0)} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {1998#true} is VALID [2022-02-20 18:12:00,684 INFO L290 TraceCheckUtils]: 34: Hoare triple {1998#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:00,684 INFO L290 TraceCheckUtils]: 35: Hoare triple {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:00,685 INFO L284 TraceCheckUtils]: 36: Hoare quadruple {2009#(= ~pumpRunning~0 |isPumpRunning_#res|)} {2000#(= ~pumpRunning~0 0)} #255#return; {2007#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret24#1|)} is VALID [2022-02-20 18:12:00,685 INFO L290 TraceCheckUtils]: 37: Hoare triple {2007#(= 0 |timeShift___utac_acc__Specification5_spec__3_#t~ret24#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {2008#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)} is VALID [2022-02-20 18:12:00,685 INFO L290 TraceCheckUtils]: 38: Hoare triple {2008#(= |timeShift___utac_acc__Specification5_spec__3_~tmp___0~2#1| 0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {1999#false} is VALID [2022-02-20 18:12:00,685 INFO L290 TraceCheckUtils]: 39: Hoare triple {1999#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {1999#false} is VALID [2022-02-20 18:12:00,686 INFO L290 TraceCheckUtils]: 40: Hoare triple {1999#false} assume !false; {1999#false} is VALID [2022-02-20 18:12:00,686 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-02-20 18:12:00,686 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:00,686 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [476017269] [2022-02-20 18:12:00,686 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [476017269] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:00,687 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:00,687 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:00,687 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899945992] [2022-02-20 18:12:00,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:00,687 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:12:00,688 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:00,688 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:00,709 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:00,709 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:00,709 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:00,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:00,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:00,710 INFO L87 Difference]: Start difference. First operand 146 states and 190 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:01,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,037 INFO L93 Difference]: Finished difference Result 386 states and 515 transitions. [2022-02-20 18:12:01,038 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-20 18:12:01,038 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-02-20 18:12:01,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:01,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:01,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 266 transitions. [2022-02-20 18:12:01,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:01,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 266 transitions. [2022-02-20 18:12:01,052 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 266 transitions. [2022-02-20 18:12:01,220 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 266 edges. 266 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,227 INFO L225 Difference]: With dead ends: 386 [2022-02-20 18:12:01,227 INFO L226 Difference]: Without dead ends: 248 [2022-02-20 18:12:01,228 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-02-20 18:12:01,228 INFO L933 BasicCegarLoop]: 114 mSDtfsCounter, 49 mSDsluCounter, 369 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:01,229 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [50 Valid, 483 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-20 18:12:01,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2022-02-20 18:12:01,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 235. [2022-02-20 18:12:01,239 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:01,240 INFO L82 GeneralOperation]: Start isEquivalent. First operand 248 states. Second operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) [2022-02-20 18:12:01,241 INFO L74 IsIncluded]: Start isIncluded. First operand 248 states. Second operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) [2022-02-20 18:12:01,242 INFO L87 Difference]: Start difference. First operand 248 states. Second operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) [2022-02-20 18:12:01,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,249 INFO L93 Difference]: Finished difference Result 248 states and 317 transitions. [2022-02-20 18:12:01,249 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 317 transitions. [2022-02-20 18:12:01,249 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,249 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,250 INFO L74 IsIncluded]: Start isIncluded. First operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) Second operand 248 states. [2022-02-20 18:12:01,251 INFO L87 Difference]: Start difference. First operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) Second operand 248 states. [2022-02-20 18:12:01,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,258 INFO L93 Difference]: Finished difference Result 248 states and 317 transitions. [2022-02-20 18:12:01,258 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 317 transitions. [2022-02-20 18:12:01,259 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,259 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,259 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:01,259 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:01,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 235 states, 176 states have (on average 1.2954545454545454) internal successors, (228), 191 states have internal predecessors, (228), 32 states have call successors, (32), 26 states have call predecessors, (32), 26 states have return successors, (40), 29 states have call predecessors, (40), 32 states have call successors, (40) [2022-02-20 18:12:01,267 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 300 transitions. [2022-02-20 18:12:01,267 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 300 transitions. Word has length 41 [2022-02-20 18:12:01,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:01,267 INFO L470 AbstractCegarLoop]: Abstraction has 235 states and 300 transitions. [2022-02-20 18:12:01,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-20 18:12:01,268 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 300 transitions. [2022-02-20 18:12:01,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:01,268 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:01,268 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:01,268 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-20 18:12:01,268 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:01,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:01,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1528927009, now seen corresponding path program 1 times [2022-02-20 18:12:01,269 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:01,269 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1761106563] [2022-02-20 18:12:01,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:01,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:01,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:01,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,310 INFO L290 TraceCheckUtils]: 0: Hoare triple {3390#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {3390#true} is VALID [2022-02-20 18:12:01,310 INFO L290 TraceCheckUtils]: 1: Hoare triple {3390#true} assume true; {3390#true} is VALID [2022-02-20 18:12:01,311 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3390#true} {3390#true} #247#return; {3390#true} is VALID [2022-02-20 18:12:01,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:01,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,333 INFO L290 TraceCheckUtils]: 0: Hoare triple {3409#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3390#true} is VALID [2022-02-20 18:12:01,334 INFO L290 TraceCheckUtils]: 1: Hoare triple {3390#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {3390#true} is VALID [2022-02-20 18:12:01,334 INFO L290 TraceCheckUtils]: 2: Hoare triple {3390#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {3390#true} is VALID [2022-02-20 18:12:01,334 INFO L290 TraceCheckUtils]: 3: Hoare triple {3390#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {3390#true} is VALID [2022-02-20 18:12:01,334 INFO L290 TraceCheckUtils]: 4: Hoare triple {3390#true} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {3410#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:01,335 INFO L290 TraceCheckUtils]: 5: Hoare triple {3410#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {3411#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:01,335 INFO L290 TraceCheckUtils]: 6: Hoare triple {3411#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {3412#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:12:01,336 INFO L290 TraceCheckUtils]: 7: Hoare triple {3412#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3391#false} is VALID [2022-02-20 18:12:01,336 INFO L290 TraceCheckUtils]: 8: Hoare triple {3391#false} assume { :end_inline_activatePump } true; {3391#false} is VALID [2022-02-20 18:12:01,336 INFO L290 TraceCheckUtils]: 9: Hoare triple {3391#false} assume true; {3391#false} is VALID [2022-02-20 18:12:01,336 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {3391#false} {3390#true} #253#return; {3391#false} is VALID [2022-02-20 18:12:01,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:01,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:01,339 INFO L290 TraceCheckUtils]: 0: Hoare triple {3390#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {3390#true} is VALID [2022-02-20 18:12:01,339 INFO L290 TraceCheckUtils]: 1: Hoare triple {3390#true} assume true; {3390#true} is VALID [2022-02-20 18:12:01,339 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {3390#true} {3391#false} #255#return; {3391#false} is VALID [2022-02-20 18:12:01,345 INFO L290 TraceCheckUtils]: 0: Hoare triple {3390#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {3390#true} is VALID [2022-02-20 18:12:01,345 INFO L290 TraceCheckUtils]: 1: Hoare triple {3390#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {3390#true} is VALID [2022-02-20 18:12:01,345 INFO L290 TraceCheckUtils]: 2: Hoare triple {3390#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 3: Hoare triple {3390#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 4: Hoare triple {3390#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 5: Hoare triple {3390#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 6: Hoare triple {3390#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 7: Hoare triple {3390#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 8: Hoare triple {3390#true} assume !false; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 9: Hoare triple {3390#true} assume test_~splverifierCounter~0#1 < 4; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 10: Hoare triple {3390#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 11: Hoare triple {3390#true} assume !(0 != test_~tmp~4#1); {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 12: Hoare triple {3390#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {3390#true} is VALID [2022-02-20 18:12:01,346 INFO L290 TraceCheckUtils]: 13: Hoare triple {3390#true} assume !(0 != test_~tmp___0~1#1); {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 14: Hoare triple {3390#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 15: Hoare triple {3390#true} assume 0 != test_~tmp___2~0#1; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L272 TraceCheckUtils]: 16: Hoare triple {3390#true} call timeShift(); {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 17: Hoare triple {3390#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L272 TraceCheckUtils]: 18: Hoare triple {3390#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 19: Hoare triple {3390#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 20: Hoare triple {3390#true} assume true; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {3390#true} {3390#true} #247#return; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 22: Hoare triple {3390#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {3390#true} is VALID [2022-02-20 18:12:01,347 INFO L290 TraceCheckUtils]: 23: Hoare triple {3390#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {3390#true} is VALID [2022-02-20 18:12:01,348 INFO L290 TraceCheckUtils]: 24: Hoare triple {3390#true} assume !(0 != ~pumpRunning~0); {3390#true} is VALID [2022-02-20 18:12:01,348 INFO L290 TraceCheckUtils]: 25: Hoare triple {3390#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {3390#true} is VALID [2022-02-20 18:12:01,348 INFO L290 TraceCheckUtils]: 26: Hoare triple {3390#true} assume !(0 != ~pumpRunning~0); {3390#true} is VALID [2022-02-20 18:12:01,349 INFO L272 TraceCheckUtils]: 27: Hoare triple {3390#true} call processEnvironment__wrappee__highWaterSensor(); {3409#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:01,349 INFO L290 TraceCheckUtils]: 28: Hoare triple {3409#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {3390#true} is VALID [2022-02-20 18:12:01,349 INFO L290 TraceCheckUtils]: 29: Hoare triple {3390#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {3390#true} is VALID [2022-02-20 18:12:01,349 INFO L290 TraceCheckUtils]: 30: Hoare triple {3390#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {3390#true} is VALID [2022-02-20 18:12:01,350 INFO L290 TraceCheckUtils]: 31: Hoare triple {3390#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {3390#true} is VALID [2022-02-20 18:12:01,357 INFO L290 TraceCheckUtils]: 32: Hoare triple {3390#true} assume 0 != isHighWaterLevel_~tmp~2#1;isHighWaterLevel_~tmp___0~0#1 := 0; {3410#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} is VALID [2022-02-20 18:12:01,358 INFO L290 TraceCheckUtils]: 33: Hoare triple {3410#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {3411#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} is VALID [2022-02-20 18:12:01,358 INFO L290 TraceCheckUtils]: 34: Hoare triple {3411#(= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {3412#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} is VALID [2022-02-20 18:12:01,358 INFO L290 TraceCheckUtils]: 35: Hoare triple {3412#(= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {3391#false} is VALID [2022-02-20 18:12:01,358 INFO L290 TraceCheckUtils]: 36: Hoare triple {3391#false} assume { :end_inline_activatePump } true; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 37: Hoare triple {3391#false} assume true; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {3391#false} {3390#true} #253#return; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 39: Hoare triple {3391#false} assume { :end_inline_processEnvironment } true; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 40: Hoare triple {3391#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 41: Hoare triple {3391#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 42: Hoare triple {3391#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {3391#false} is VALID [2022-02-20 18:12:01,359 INFO L272 TraceCheckUtils]: 43: Hoare triple {3391#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {3390#true} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 44: Hoare triple {3390#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {3390#true} is VALID [2022-02-20 18:12:01,359 INFO L290 TraceCheckUtils]: 45: Hoare triple {3390#true} assume true; {3390#true} is VALID [2022-02-20 18:12:01,359 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {3390#true} {3391#false} #255#return; {3391#false} is VALID [2022-02-20 18:12:01,360 INFO L290 TraceCheckUtils]: 47: Hoare triple {3391#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {3391#false} is VALID [2022-02-20 18:12:01,360 INFO L290 TraceCheckUtils]: 48: Hoare triple {3391#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {3391#false} is VALID [2022-02-20 18:12:01,360 INFO L290 TraceCheckUtils]: 49: Hoare triple {3391#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {3391#false} is VALID [2022-02-20 18:12:01,360 INFO L290 TraceCheckUtils]: 50: Hoare triple {3391#false} assume !false; {3391#false} is VALID [2022-02-20 18:12:01,360 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:01,360 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:01,360 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1761106563] [2022-02-20 18:12:01,360 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1761106563] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:01,360 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:01,360 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:01,361 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831595903] [2022-02-20 18:12:01,361 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:01,361 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:01,361 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:01,361 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,390 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,391 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:01,391 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:01,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:01,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:01,391 INFO L87 Difference]: Start difference. First operand 235 states and 300 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,742 INFO L93 Difference]: Finished difference Result 522 states and 677 transitions. [2022-02-20 18:12:01,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:01,743 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:01,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:01,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,745 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 227 transitions. [2022-02-20 18:12:01,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 227 transitions. [2022-02-20 18:12:01,748 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 227 transitions. [2022-02-20 18:12:01,875 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 227 edges. 227 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:01,882 INFO L225 Difference]: With dead ends: 522 [2022-02-20 18:12:01,883 INFO L226 Difference]: Without dead ends: 295 [2022-02-20 18:12:01,883 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:01,884 INFO L933 BasicCegarLoop]: 95 mSDtfsCounter, 65 mSDsluCounter, 290 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:01,884 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [68 Valid, 385 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:01,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 295 states. [2022-02-20 18:12:01,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 295 to 287. [2022-02-20 18:12:01,908 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:01,909 INFO L82 GeneralOperation]: Start isEquivalent. First operand 295 states. Second operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:01,910 INFO L74 IsIncluded]: Start isIncluded. First operand 295 states. Second operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:01,911 INFO L87 Difference]: Start difference. First operand 295 states. Second operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:01,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,939 INFO L93 Difference]: Finished difference Result 295 states and 375 transitions. [2022-02-20 18:12:01,939 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 375 transitions. [2022-02-20 18:12:01,940 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,940 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,940 INFO L74 IsIncluded]: Start isIncluded. First operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) Second operand 295 states. [2022-02-20 18:12:01,941 INFO L87 Difference]: Start difference. First operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) Second operand 295 states. [2022-02-20 18:12:01,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:01,947 INFO L93 Difference]: Finished difference Result 295 states and 375 transitions. [2022-02-20 18:12:01,947 INFO L276 IsEmpty]: Start isEmpty. Operand 295 states and 375 transitions. [2022-02-20 18:12:01,948 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:01,948 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:01,948 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:01,948 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:01,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 218 states have (on average 1.275229357798165) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:01,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 364 transitions. [2022-02-20 18:12:01,968 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 364 transitions. Word has length 51 [2022-02-20 18:12:01,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:01,968 INFO L470 AbstractCegarLoop]: Abstraction has 287 states and 364 transitions. [2022-02-20 18:12:01,969 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:01,969 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 364 transitions. [2022-02-20 18:12:01,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:01,969 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:01,969 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:01,970 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-20 18:12:01,970 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:01,970 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:01,970 INFO L85 PathProgramCache]: Analyzing trace with hash 1077096545, now seen corresponding path program 1 times [2022-02-20 18:12:01,970 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:01,970 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1158593464] [2022-02-20 18:12:01,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:01,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:01,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:02,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,033 INFO L290 TraceCheckUtils]: 0: Hoare triple {5143#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5143#true} is VALID [2022-02-20 18:12:02,033 INFO L290 TraceCheckUtils]: 1: Hoare triple {5143#true} assume true; {5143#true} is VALID [2022-02-20 18:12:02,033 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5143#true} {5145#(= 1 ~systemActive~0)} #247#return; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:02,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,074 INFO L290 TraceCheckUtils]: 0: Hoare triple {5163#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {5143#true} is VALID [2022-02-20 18:12:02,075 INFO L290 TraceCheckUtils]: 1: Hoare triple {5143#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5143#true} is VALID [2022-02-20 18:12:02,075 INFO L290 TraceCheckUtils]: 2: Hoare triple {5143#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5164#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} is VALID [2022-02-20 18:12:02,076 INFO L290 TraceCheckUtils]: 3: Hoare triple {5164#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {5165#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0))} is VALID [2022-02-20 18:12:02,076 INFO L290 TraceCheckUtils]: 4: Hoare triple {5165#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {5144#false} is VALID [2022-02-20 18:12:02,076 INFO L290 TraceCheckUtils]: 5: Hoare triple {5144#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5144#false} is VALID [2022-02-20 18:12:02,076 INFO L290 TraceCheckUtils]: 6: Hoare triple {5144#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {5144#false} is VALID [2022-02-20 18:12:02,077 INFO L290 TraceCheckUtils]: 7: Hoare triple {5144#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5144#false} is VALID [2022-02-20 18:12:02,077 INFO L290 TraceCheckUtils]: 8: Hoare triple {5144#false} assume { :end_inline_activatePump } true; {5144#false} is VALID [2022-02-20 18:12:02,077 INFO L290 TraceCheckUtils]: 9: Hoare triple {5144#false} assume true; {5144#false} is VALID [2022-02-20 18:12:02,077 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {5144#false} {5143#true} #253#return; {5144#false} is VALID [2022-02-20 18:12:02,077 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:02,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:02,080 INFO L290 TraceCheckUtils]: 0: Hoare triple {5143#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5143#true} is VALID [2022-02-20 18:12:02,080 INFO L290 TraceCheckUtils]: 1: Hoare triple {5143#true} assume true; {5143#true} is VALID [2022-02-20 18:12:02,080 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {5143#true} {5144#false} #255#return; {5144#false} is VALID [2022-02-20 18:12:02,082 INFO L290 TraceCheckUtils]: 0: Hoare triple {5143#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,082 INFO L290 TraceCheckUtils]: 1: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,083 INFO L290 TraceCheckUtils]: 2: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,083 INFO L290 TraceCheckUtils]: 3: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,084 INFO L290 TraceCheckUtils]: 4: Hoare triple {5145#(= 1 ~systemActive~0)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,084 INFO L290 TraceCheckUtils]: 5: Hoare triple {5145#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,084 INFO L290 TraceCheckUtils]: 6: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,085 INFO L290 TraceCheckUtils]: 7: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,085 INFO L290 TraceCheckUtils]: 8: Hoare triple {5145#(= 1 ~systemActive~0)} assume !false; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,085 INFO L290 TraceCheckUtils]: 9: Hoare triple {5145#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,086 INFO L290 TraceCheckUtils]: 10: Hoare triple {5145#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,086 INFO L290 TraceCheckUtils]: 11: Hoare triple {5145#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~4#1); {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,086 INFO L290 TraceCheckUtils]: 12: Hoare triple {5145#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,087 INFO L290 TraceCheckUtils]: 13: Hoare triple {5145#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,087 INFO L290 TraceCheckUtils]: 14: Hoare triple {5145#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,087 INFO L290 TraceCheckUtils]: 15: Hoare triple {5145#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,088 INFO L272 TraceCheckUtils]: 16: Hoare triple {5145#(= 1 ~systemActive~0)} call timeShift(); {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,088 INFO L290 TraceCheckUtils]: 17: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,088 INFO L272 TraceCheckUtils]: 18: Hoare triple {5145#(= 1 ~systemActive~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {5143#true} is VALID [2022-02-20 18:12:02,088 INFO L290 TraceCheckUtils]: 19: Hoare triple {5143#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5143#true} is VALID [2022-02-20 18:12:02,088 INFO L290 TraceCheckUtils]: 20: Hoare triple {5143#true} assume true; {5143#true} is VALID [2022-02-20 18:12:02,089 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {5143#true} {5145#(= 1 ~systemActive~0)} #247#return; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,089 INFO L290 TraceCheckUtils]: 22: Hoare triple {5145#(= 1 ~systemActive~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,089 INFO L290 TraceCheckUtils]: 23: Hoare triple {5145#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,090 INFO L290 TraceCheckUtils]: 24: Hoare triple {5145#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {5145#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:02,090 INFO L290 TraceCheckUtils]: 25: Hoare triple {5145#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {5143#true} is VALID [2022-02-20 18:12:02,090 INFO L290 TraceCheckUtils]: 26: Hoare triple {5143#true} assume !(0 != ~pumpRunning~0); {5143#true} is VALID [2022-02-20 18:12:02,090 INFO L272 TraceCheckUtils]: 27: Hoare triple {5143#true} call processEnvironment__wrappee__highWaterSensor(); {5163#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:02,090 INFO L290 TraceCheckUtils]: 28: Hoare triple {5163#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {5143#true} is VALID [2022-02-20 18:12:02,090 INFO L290 TraceCheckUtils]: 29: Hoare triple {5143#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {5143#true} is VALID [2022-02-20 18:12:02,091 INFO L290 TraceCheckUtils]: 30: Hoare triple {5143#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11#1 := 1;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {5164#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} is VALID [2022-02-20 18:12:02,091 INFO L290 TraceCheckUtils]: 31: Hoare triple {5164#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {5165#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0))} is VALID [2022-02-20 18:12:02,091 INFO L290 TraceCheckUtils]: 32: Hoare triple {5165#(not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {5144#false} is VALID [2022-02-20 18:12:02,091 INFO L290 TraceCheckUtils]: 33: Hoare triple {5144#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {5144#false} is VALID [2022-02-20 18:12:02,091 INFO L290 TraceCheckUtils]: 34: Hoare triple {5144#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 35: Hoare triple {5144#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 36: Hoare triple {5144#false} assume { :end_inline_activatePump } true; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 37: Hoare triple {5144#false} assume true; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {5144#false} {5143#true} #253#return; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 39: Hoare triple {5144#false} assume { :end_inline_processEnvironment } true; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 40: Hoare triple {5144#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 41: Hoare triple {5144#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 42: Hoare triple {5144#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L272 TraceCheckUtils]: 43: Hoare triple {5144#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {5143#true} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 44: Hoare triple {5143#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {5143#true} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 45: Hoare triple {5143#true} assume true; {5143#true} is VALID [2022-02-20 18:12:02,092 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {5143#true} {5144#false} #255#return; {5144#false} is VALID [2022-02-20 18:12:02,092 INFO L290 TraceCheckUtils]: 47: Hoare triple {5144#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {5144#false} is VALID [2022-02-20 18:12:02,093 INFO L290 TraceCheckUtils]: 48: Hoare triple {5144#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {5144#false} is VALID [2022-02-20 18:12:02,093 INFO L290 TraceCheckUtils]: 49: Hoare triple {5144#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {5144#false} is VALID [2022-02-20 18:12:02,093 INFO L290 TraceCheckUtils]: 50: Hoare triple {5144#false} assume !false; {5144#false} is VALID [2022-02-20 18:12:02,093 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:02,093 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:02,093 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1158593464] [2022-02-20 18:12:02,093 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1158593464] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:02,093 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:02,093 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-20 18:12:02,093 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025032977] [2022-02-20 18:12:02,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:02,094 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2022-02-20 18:12:02,094 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:02,094 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:02,128 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,129 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:02,129 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:02,129 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:02,129 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-20 18:12:02,129 INFO L87 Difference]: Start difference. First operand 287 states and 364 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:02,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:02,710 INFO L93 Difference]: Finished difference Result 596 states and 773 transitions. [2022-02-20 18:12:02,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:12:02,710 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2022-02-20 18:12:02,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:02,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:02,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 367 transitions. [2022-02-20 18:12:02,714 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:02,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 367 transitions. [2022-02-20 18:12:02,717 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 367 transitions. [2022-02-20 18:12:02,973 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 367 edges. 367 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:02,979 INFO L225 Difference]: With dead ends: 596 [2022-02-20 18:12:02,979 INFO L226 Difference]: Without dead ends: 317 [2022-02-20 18:12:02,980 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-02-20 18:12:02,980 INFO L933 BasicCegarLoop]: 117 mSDtfsCounter, 212 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 219 SdHoareTripleChecker+Valid, 437 SdHoareTripleChecker+Invalid, 229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:02,980 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [219 Valid, 437 Invalid, 229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:02,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2022-02-20 18:12:03,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 291. [2022-02-20 18:12:03,005 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:03,006 INFO L82 GeneralOperation]: Start isEquivalent. First operand 317 states. Second operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:03,007 INFO L74 IsIncluded]: Start isIncluded. First operand 317 states. Second operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:03,007 INFO L87 Difference]: Start difference. First operand 317 states. Second operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:03,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,014 INFO L93 Difference]: Finished difference Result 317 states and 399 transitions. [2022-02-20 18:12:03,014 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 399 transitions. [2022-02-20 18:12:03,014 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:03,014 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:03,015 INFO L74 IsIncluded]: Start isIncluded. First operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) Second operand 317 states. [2022-02-20 18:12:03,016 INFO L87 Difference]: Start difference. First operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) Second operand 317 states. [2022-02-20 18:12:03,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,022 INFO L93 Difference]: Finished difference Result 317 states and 399 transitions. [2022-02-20 18:12:03,022 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 399 transitions. [2022-02-20 18:12:03,022 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:03,022 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:03,023 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:03,023 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:03,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 222 states have (on average 1.2702702702702702) internal successors, (282), 237 states have internal predecessors, (282), 36 states have call successors, (36), 26 states have call predecessors, (36), 32 states have return successors, (50), 37 states have call predecessors, (50), 36 states have call successors, (50) [2022-02-20 18:12:03,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 368 transitions. [2022-02-20 18:12:03,029 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 368 transitions. Word has length 51 [2022-02-20 18:12:03,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:03,030 INFO L470 AbstractCegarLoop]: Abstraction has 291 states and 368 transitions. [2022-02-20 18:12:03,030 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-02-20 18:12:03,030 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 368 transitions. [2022-02-20 18:12:03,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-20 18:12:03,030 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:03,031 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:03,031 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-20 18:12:03,031 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:03,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:03,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1499798371, now seen corresponding path program 1 times [2022-02-20 18:12:03,031 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:03,031 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112479217] [2022-02-20 18:12:03,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:03,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:03,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:03,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,112 INFO L290 TraceCheckUtils]: 0: Hoare triple {7051#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7051#true} is VALID [2022-02-20 18:12:03,112 INFO L290 TraceCheckUtils]: 1: Hoare triple {7051#true} assume true; {7051#true} is VALID [2022-02-20 18:12:03,113 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7051#true} {7053#(= ~waterLevel~0 1)} #247#return; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-02-20 18:12:03,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,133 INFO L290 TraceCheckUtils]: 0: Hoare triple {7071#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7051#true} is VALID [2022-02-20 18:12:03,135 INFO L290 TraceCheckUtils]: 1: Hoare triple {7051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {7051#true} is VALID [2022-02-20 18:12:03,135 INFO L290 TraceCheckUtils]: 2: Hoare triple {7051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,136 INFO L290 TraceCheckUtils]: 3: Hoare triple {7072#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,136 INFO L290 TraceCheckUtils]: 4: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,136 INFO L290 TraceCheckUtils]: 5: Hoare triple {7072#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,136 INFO L290 TraceCheckUtils]: 6: Hoare triple {7072#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,137 INFO L290 TraceCheckUtils]: 7: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,137 INFO L290 TraceCheckUtils]: 8: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,137 INFO L290 TraceCheckUtils]: 9: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume true; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,138 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {7072#(<= 2 ~waterLevel~0)} {7053#(= ~waterLevel~0 1)} #253#return; {7052#false} is VALID [2022-02-20 18:12:03,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-20 18:12:03,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:03,147 INFO L290 TraceCheckUtils]: 0: Hoare triple {7051#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7051#true} is VALID [2022-02-20 18:12:03,147 INFO L290 TraceCheckUtils]: 1: Hoare triple {7051#true} assume true; {7051#true} is VALID [2022-02-20 18:12:03,147 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {7051#true} {7052#false} #255#return; {7052#false} is VALID [2022-02-20 18:12:03,148 INFO L290 TraceCheckUtils]: 0: Hoare triple {7051#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,148 INFO L290 TraceCheckUtils]: 1: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 2: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 3: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,149 INFO L290 TraceCheckUtils]: 4: Hoare triple {7053#(= ~waterLevel~0 1)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L290 TraceCheckUtils]: 5: Hoare triple {7053#(= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L290 TraceCheckUtils]: 6: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L290 TraceCheckUtils]: 7: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,150 INFO L290 TraceCheckUtils]: 8: Hoare triple {7053#(= ~waterLevel~0 1)} assume !false; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,151 INFO L290 TraceCheckUtils]: 9: Hoare triple {7053#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 10: Hoare triple {7053#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 11: Hoare triple {7053#(= ~waterLevel~0 1)} assume !(0 != test_~tmp~4#1); {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,152 INFO L290 TraceCheckUtils]: 12: Hoare triple {7053#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 13: Hoare triple {7053#(= ~waterLevel~0 1)} assume !(0 != test_~tmp___0~1#1); {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 14: Hoare triple {7053#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,153 INFO L290 TraceCheckUtils]: 15: Hoare triple {7053#(= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,154 INFO L272 TraceCheckUtils]: 16: Hoare triple {7053#(= ~waterLevel~0 1)} call timeShift(); {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,154 INFO L290 TraceCheckUtils]: 17: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,154 INFO L272 TraceCheckUtils]: 18: Hoare triple {7053#(= ~waterLevel~0 1)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {7051#true} is VALID [2022-02-20 18:12:03,154 INFO L290 TraceCheckUtils]: 19: Hoare triple {7051#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7051#true} is VALID [2022-02-20 18:12:03,154 INFO L290 TraceCheckUtils]: 20: Hoare triple {7051#true} assume true; {7051#true} is VALID [2022-02-20 18:12:03,155 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {7051#true} {7053#(= ~waterLevel~0 1)} #247#return; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 22: Hoare triple {7053#(= ~waterLevel~0 1)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 23: Hoare triple {7053#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,155 INFO L290 TraceCheckUtils]: 24: Hoare triple {7053#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 25: Hoare triple {7053#(= ~waterLevel~0 1)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 26: Hoare triple {7053#(= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {7053#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:03,156 INFO L272 TraceCheckUtils]: 27: Hoare triple {7053#(= ~waterLevel~0 1)} call processEnvironment__wrappee__highWaterSensor(); {7071#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:03,156 INFO L290 TraceCheckUtils]: 28: Hoare triple {7071#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {7051#true} is VALID [2022-02-20 18:12:03,157 INFO L290 TraceCheckUtils]: 29: Hoare triple {7051#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {7051#true} is VALID [2022-02-20 18:12:03,157 INFO L290 TraceCheckUtils]: 30: Hoare triple {7051#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,157 INFO L290 TraceCheckUtils]: 31: Hoare triple {7072#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,157 INFO L290 TraceCheckUtils]: 32: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,158 INFO L290 TraceCheckUtils]: 33: Hoare triple {7072#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,158 INFO L290 TraceCheckUtils]: 34: Hoare triple {7072#(<= 2 ~waterLevel~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,158 INFO L290 TraceCheckUtils]: 35: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,158 INFO L290 TraceCheckUtils]: 36: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume { :end_inline_activatePump } true; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,159 INFO L290 TraceCheckUtils]: 37: Hoare triple {7072#(<= 2 ~waterLevel~0)} assume true; {7072#(<= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:03,159 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {7072#(<= 2 ~waterLevel~0)} {7053#(= ~waterLevel~0 1)} #253#return; {7052#false} is VALID [2022-02-20 18:12:03,159 INFO L290 TraceCheckUtils]: 39: Hoare triple {7052#false} assume { :end_inline_processEnvironment } true; {7052#false} is VALID [2022-02-20 18:12:03,159 INFO L290 TraceCheckUtils]: 40: Hoare triple {7052#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {7052#false} is VALID [2022-02-20 18:12:03,159 INFO L290 TraceCheckUtils]: 41: Hoare triple {7052#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {7052#false} is VALID [2022-02-20 18:12:03,159 INFO L290 TraceCheckUtils]: 42: Hoare triple {7052#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {7052#false} is VALID [2022-02-20 18:12:03,163 INFO L272 TraceCheckUtils]: 43: Hoare triple {7052#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {7051#true} is VALID [2022-02-20 18:12:03,163 INFO L290 TraceCheckUtils]: 44: Hoare triple {7051#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {7051#true} is VALID [2022-02-20 18:12:03,163 INFO L290 TraceCheckUtils]: 45: Hoare triple {7051#true} assume true; {7051#true} is VALID [2022-02-20 18:12:03,163 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {7051#true} {7052#false} #255#return; {7052#false} is VALID [2022-02-20 18:12:03,164 INFO L290 TraceCheckUtils]: 47: Hoare triple {7052#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {7052#false} is VALID [2022-02-20 18:12:03,164 INFO L290 TraceCheckUtils]: 48: Hoare triple {7052#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {7052#false} is VALID [2022-02-20 18:12:03,164 INFO L290 TraceCheckUtils]: 49: Hoare triple {7052#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {7052#false} is VALID [2022-02-20 18:12:03,164 INFO L290 TraceCheckUtils]: 50: Hoare triple {7052#false} assume !false; {7052#false} is VALID [2022-02-20 18:12:03,164 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:03,164 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:03,166 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112479217] [2022-02-20 18:12:03,166 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112479217] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:03,167 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:03,167 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-20 18:12:03,167 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1951015228] [2022-02-20 18:12:03,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:03,167 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:03,168 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:03,168 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,193 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:03,194 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-20 18:12:03,194 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:03,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-20 18:12:03,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-20 18:12:03,194 INFO L87 Difference]: Start difference. First operand 291 states and 368 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,776 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:03,776 INFO L93 Difference]: Finished difference Result 846 states and 1109 transitions. [2022-02-20 18:12:03,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-20 18:12:03,776 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-02-20 18:12:03,777 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:03,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 376 transitions. [2022-02-20 18:12:03,781 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:03,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 376 transitions. [2022-02-20 18:12:03,798 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 376 transitions. [2022-02-20 18:12:04,028 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 376 edges. 376 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,044 INFO L225 Difference]: With dead ends: 846 [2022-02-20 18:12:04,045 INFO L226 Difference]: Without dead ends: 563 [2022-02-20 18:12:04,046 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:04,046 INFO L933 BasicCegarLoop]: 149 mSDtfsCounter, 219 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:04,046 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [226 Valid, 332 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:04,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 563 states. [2022-02-20 18:12:04,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 563 to 556. [2022-02-20 18:12:04,092 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:04,093 INFO L82 GeneralOperation]: Start isEquivalent. First operand 563 states. Second operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) [2022-02-20 18:12:04,094 INFO L74 IsIncluded]: Start isIncluded. First operand 563 states. Second operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) [2022-02-20 18:12:04,095 INFO L87 Difference]: Start difference. First operand 563 states. Second operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) [2022-02-20 18:12:04,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,109 INFO L93 Difference]: Finished difference Result 563 states and 711 transitions. [2022-02-20 18:12:04,109 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 711 transitions. [2022-02-20 18:12:04,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,110 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,111 INFO L74 IsIncluded]: Start isIncluded. First operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) Second operand 563 states. [2022-02-20 18:12:04,112 INFO L87 Difference]: Start difference. First operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) Second operand 563 states. [2022-02-20 18:12:04,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:04,126 INFO L93 Difference]: Finished difference Result 563 states and 711 transitions. [2022-02-20 18:12:04,126 INFO L276 IsEmpty]: Start isEmpty. Operand 563 states and 711 transitions. [2022-02-20 18:12:04,127 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:04,127 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:04,127 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:04,127 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:04,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 556 states, 421 states have (on average 1.2351543942992873) internal successors, (520), 445 states have internal predecessors, (520), 73 states have call successors, (73), 59 states have call predecessors, (73), 61 states have return successors, (111), 72 states have call predecessors, (111), 73 states have call successors, (111) [2022-02-20 18:12:04,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 556 states to 556 states and 704 transitions. [2022-02-20 18:12:04,145 INFO L78 Accepts]: Start accepts. Automaton has 556 states and 704 transitions. Word has length 51 [2022-02-20 18:12:04,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:04,145 INFO L470 AbstractCegarLoop]: Abstraction has 556 states and 704 transitions. [2022-02-20 18:12:04,146 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-02-20 18:12:04,146 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 704 transitions. [2022-02-20 18:12:04,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-02-20 18:12:04,146 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:04,146 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:04,147 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-20 18:12:04,147 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:04,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:04,147 INFO L85 PathProgramCache]: Analyzing trace with hash -85847159, now seen corresponding path program 1 times [2022-02-20 18:12:04,147 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:04,147 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561753026] [2022-02-20 18:12:04,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:04,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:04,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:04,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,233 INFO L290 TraceCheckUtils]: 0: Hoare triple {10184#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,236 INFO L290 TraceCheckUtils]: 1: Hoare triple {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,238 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {10160#(= ~waterLevel~0 1)} #257#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-20 18:12:04,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,241 INFO L290 TraceCheckUtils]: 0: Hoare triple {10158#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {10158#true} is VALID [2022-02-20 18:12:04,241 INFO L290 TraceCheckUtils]: 1: Hoare triple {10158#true} assume true; {10158#true} is VALID [2022-02-20 18:12:04,242 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10158#true} {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #247#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-02-20 18:12:04,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,278 INFO L290 TraceCheckUtils]: 0: Hoare triple {10186#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10158#true} is VALID [2022-02-20 18:12:04,278 INFO L290 TraceCheckUtils]: 1: Hoare triple {10158#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {10158#true} is VALID [2022-02-20 18:12:04,279 INFO L290 TraceCheckUtils]: 2: Hoare triple {10158#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,280 INFO L290 TraceCheckUtils]: 3: Hoare triple {10187#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,280 INFO L290 TraceCheckUtils]: 4: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,283 INFO L290 TraceCheckUtils]: 5: Hoare triple {10187#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,286 INFO L290 TraceCheckUtils]: 6: Hoare triple {10187#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,286 INFO L290 TraceCheckUtils]: 7: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,287 INFO L290 TraceCheckUtils]: 8: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,287 INFO L290 TraceCheckUtils]: 9: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume true; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,287 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {10187#(not (<= ~waterLevel~0 1))} {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #253#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-02-20 18:12:04,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:04,290 INFO L290 TraceCheckUtils]: 0: Hoare triple {10158#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {10158#true} is VALID [2022-02-20 18:12:04,290 INFO L290 TraceCheckUtils]: 1: Hoare triple {10158#true} assume true; {10158#true} is VALID [2022-02-20 18:12:04,290 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {10158#true} {10159#false} #255#return; {10159#false} is VALID [2022-02-20 18:12:04,290 INFO L290 TraceCheckUtils]: 0: Hoare triple {10158#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,291 INFO L290 TraceCheckUtils]: 1: Hoare triple {10160#(= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,291 INFO L290 TraceCheckUtils]: 2: Hoare triple {10160#(= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,291 INFO L290 TraceCheckUtils]: 3: Hoare triple {10160#(= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,292 INFO L290 TraceCheckUtils]: 4: Hoare triple {10160#(= ~waterLevel~0 1)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,292 INFO L290 TraceCheckUtils]: 5: Hoare triple {10160#(= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,292 INFO L290 TraceCheckUtils]: 6: Hoare triple {10160#(= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,292 INFO L290 TraceCheckUtils]: 7: Hoare triple {10160#(= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,293 INFO L290 TraceCheckUtils]: 8: Hoare triple {10160#(= ~waterLevel~0 1)} assume !false; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,293 INFO L290 TraceCheckUtils]: 9: Hoare triple {10160#(= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,293 INFO L290 TraceCheckUtils]: 10: Hoare triple {10160#(= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,293 INFO L290 TraceCheckUtils]: 11: Hoare triple {10160#(= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {10160#(= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:04,294 INFO L272 TraceCheckUtils]: 12: Hoare triple {10160#(= ~waterLevel~0 1)} call waterRise(); {10184#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:04,294 INFO L290 TraceCheckUtils]: 13: Hoare triple {10184#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,295 INFO L290 TraceCheckUtils]: 14: Hoare triple {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} assume true; {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,295 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {10185#(and (<= (+ |old(~waterLevel~0)| 1) ~waterLevel~0) (<= ~waterLevel~0 2))} {10160#(= ~waterLevel~0 1)} #257#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,296 INFO L290 TraceCheckUtils]: 16: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,296 INFO L290 TraceCheckUtils]: 17: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~1#1); {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,296 INFO L290 TraceCheckUtils]: 18: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,297 INFO L290 TraceCheckUtils]: 19: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,297 INFO L272 TraceCheckUtils]: 20: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call timeShift(); {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,297 INFO L290 TraceCheckUtils]: 21: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,297 INFO L272 TraceCheckUtils]: 22: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {10158#true} is VALID [2022-02-20 18:12:04,297 INFO L290 TraceCheckUtils]: 23: Hoare triple {10158#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {10158#true} is VALID [2022-02-20 18:12:04,298 INFO L290 TraceCheckUtils]: 24: Hoare triple {10158#true} assume true; {10158#true} is VALID [2022-02-20 18:12:04,298 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {10158#true} {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #247#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,298 INFO L290 TraceCheckUtils]: 26: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,299 INFO L290 TraceCheckUtils]: 27: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,299 INFO L290 TraceCheckUtils]: 28: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,299 INFO L290 TraceCheckUtils]: 29: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,300 INFO L290 TraceCheckUtils]: 30: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,300 INFO L272 TraceCheckUtils]: 31: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} call processEnvironment__wrappee__highWaterSensor(); {10186#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:04,300 INFO L290 TraceCheckUtils]: 32: Hoare triple {10186#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {10158#true} is VALID [2022-02-20 18:12:04,300 INFO L290 TraceCheckUtils]: 33: Hoare triple {10158#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {10158#true} is VALID [2022-02-20 18:12:04,301 INFO L290 TraceCheckUtils]: 34: Hoare triple {10158#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,301 INFO L290 TraceCheckUtils]: 35: Hoare triple {10187#(not (<= ~waterLevel~0 1))} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,301 INFO L290 TraceCheckUtils]: 36: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,301 INFO L290 TraceCheckUtils]: 37: Hoare triple {10187#(not (<= ~waterLevel~0 1))} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,302 INFO L290 TraceCheckUtils]: 38: Hoare triple {10187#(not (<= ~waterLevel~0 1))} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,302 INFO L290 TraceCheckUtils]: 39: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,302 INFO L290 TraceCheckUtils]: 40: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume { :end_inline_activatePump } true; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,302 INFO L290 TraceCheckUtils]: 41: Hoare triple {10187#(not (<= ~waterLevel~0 1))} assume true; {10187#(not (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:04,303 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {10187#(not (<= ~waterLevel~0 1))} {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} #253#return; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,303 INFO L290 TraceCheckUtils]: 43: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :end_inline_processEnvironment } true; {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:04,304 INFO L290 TraceCheckUtils]: 44: Hoare triple {10164#(and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {10179#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:04,304 INFO L290 TraceCheckUtils]: 45: Hoare triple {10179#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {10180#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)} is VALID [2022-02-20 18:12:04,304 INFO L290 TraceCheckUtils]: 46: Hoare triple {10180#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {10159#false} is VALID [2022-02-20 18:12:04,304 INFO L272 TraceCheckUtils]: 47: Hoare triple {10159#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {10158#true} is VALID [2022-02-20 18:12:04,304 INFO L290 TraceCheckUtils]: 48: Hoare triple {10158#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {10158#true} is VALID [2022-02-20 18:12:04,304 INFO L290 TraceCheckUtils]: 49: Hoare triple {10158#true} assume true; {10158#true} is VALID [2022-02-20 18:12:04,305 INFO L284 TraceCheckUtils]: 50: Hoare quadruple {10158#true} {10159#false} #255#return; {10159#false} is VALID [2022-02-20 18:12:04,305 INFO L290 TraceCheckUtils]: 51: Hoare triple {10159#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {10159#false} is VALID [2022-02-20 18:12:04,305 INFO L290 TraceCheckUtils]: 52: Hoare triple {10159#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {10159#false} is VALID [2022-02-20 18:12:04,305 INFO L290 TraceCheckUtils]: 53: Hoare triple {10159#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {10159#false} is VALID [2022-02-20 18:12:04,305 INFO L290 TraceCheckUtils]: 54: Hoare triple {10159#false} assume !false; {10159#false} is VALID [2022-02-20 18:12:04,305 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-02-20 18:12:04,305 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:04,305 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561753026] [2022-02-20 18:12:04,305 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561753026] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:04,305 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:04,305 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:04,306 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116480944] [2022-02-20 18:12:04,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:04,306 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:04,306 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:04,306 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:04,341 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:04,341 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:04,341 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:04,342 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:04,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:04,342 INFO L87 Difference]: Start difference. First operand 556 states and 704 transitions. Second operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:06,846 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:06,847 INFO L93 Difference]: Finished difference Result 1787 states and 2374 transitions. [2022-02-20 18:12:06,847 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-02-20 18:12:06,847 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-02-20 18:12:06,847 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:06,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:06,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 636 transitions. [2022-02-20 18:12:06,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:06,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 636 transitions. [2022-02-20 18:12:06,863 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 33 states and 636 transitions. [2022-02-20 18:12:07,284 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 636 edges. 636 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:07,361 INFO L225 Difference]: With dead ends: 1787 [2022-02-20 18:12:07,361 INFO L226 Difference]: Without dead ends: 1342 [2022-02-20 18:12:07,363 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 294 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-02-20 18:12:07,363 INFO L933 BasicCegarLoop]: 172 mSDtfsCounter, 559 mSDsluCounter, 693 mSDsCounter, 0 mSdLazyCounter, 792 mSolverCounterSat, 203 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 569 SdHoareTripleChecker+Valid, 865 SdHoareTripleChecker+Invalid, 995 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 203 IncrementalHoareTripleChecker+Valid, 792 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:07,363 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [569 Valid, 865 Invalid, 995 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [203 Valid, 792 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-02-20 18:12:07,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1342 states. [2022-02-20 18:12:07,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1342 to 1083. [2022-02-20 18:12:07,592 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:07,600 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1342 states. Second operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) [2022-02-20 18:12:07,603 INFO L74 IsIncluded]: Start isIncluded. First operand 1342 states. Second operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) [2022-02-20 18:12:07,605 INFO L87 Difference]: Start difference. First operand 1342 states. Second operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) [2022-02-20 18:12:07,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:07,666 INFO L93 Difference]: Finished difference Result 1342 states and 1723 transitions. [2022-02-20 18:12:07,666 INFO L276 IsEmpty]: Start isEmpty. Operand 1342 states and 1723 transitions. [2022-02-20 18:12:07,670 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:07,671 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:07,672 INFO L74 IsIncluded]: Start isIncluded. First operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) Second operand 1342 states. [2022-02-20 18:12:07,675 INFO L87 Difference]: Start difference. First operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) Second operand 1342 states. [2022-02-20 18:12:07,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:07,735 INFO L93 Difference]: Finished difference Result 1342 states and 1723 transitions. [2022-02-20 18:12:07,735 INFO L276 IsEmpty]: Start isEmpty. Operand 1342 states and 1723 transitions. [2022-02-20 18:12:07,738 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:07,738 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:07,738 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:07,738 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:07,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1083 states, 820 states have (on average 1.2317073170731707) internal successors, (1010), 873 states have internal predecessors, (1010), 142 states have call successors, (142), 104 states have call predecessors, (142), 120 states have return successors, (220), 140 states have call predecessors, (220), 142 states have call successors, (220) [2022-02-20 18:12:07,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1083 states to 1083 states and 1372 transitions. [2022-02-20 18:12:07,806 INFO L78 Accepts]: Start accepts. Automaton has 1083 states and 1372 transitions. Word has length 55 [2022-02-20 18:12:07,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:07,808 INFO L470 AbstractCegarLoop]: Abstraction has 1083 states and 1372 transitions. [2022-02-20 18:12:07,808 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.4) internal successors, (44), 8 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-02-20 18:12:07,808 INFO L276 IsEmpty]: Start isEmpty. Operand 1083 states and 1372 transitions. [2022-02-20 18:12:07,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-02-20 18:12:07,809 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:07,810 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:07,810 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-20 18:12:07,810 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:07,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:07,811 INFO L85 PathProgramCache]: Analyzing trace with hash 1602781584, now seen corresponding path program 1 times [2022-02-20 18:12:07,811 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:07,811 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400787924] [2022-02-20 18:12:07,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:07,811 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:07,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:07,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {16959#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16918#true} is VALID [2022-02-20 18:12:07,870 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,870 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16918#true} {16918#true} #257#return; {16918#true} is VALID [2022-02-20 18:12:07,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:07,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:07,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,888 INFO L290 TraceCheckUtils]: 0: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,888 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,888 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16918#true} {16918#true} #247#return; {16918#true} is VALID [2022-02-20 18:12:07,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:07,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 0: Hoare triple {16976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 2: Hoare triple {16918#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 3: Hoare triple {16918#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 4: Hoare triple {16918#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 5: Hoare triple {16918#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 6: Hoare triple {16918#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 7: Hoare triple {16918#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 8: Hoare triple {16918#true} assume { :end_inline_activatePump } true; {16918#true} is VALID [2022-02-20 18:12:07,897 INFO L290 TraceCheckUtils]: 9: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {16918#true} {16964#(not (= 0 ~systemActive~0))} #253#return; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,898 INFO L290 TraceCheckUtils]: 0: Hoare triple {16960#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L272 TraceCheckUtils]: 1: Hoare triple {16918#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L290 TraceCheckUtils]: 2: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L290 TraceCheckUtils]: 3: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {16918#true} {16918#true} #247#return; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L290 TraceCheckUtils]: 5: Hoare triple {16918#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16918#true} is VALID [2022-02-20 18:12:07,898 INFO L290 TraceCheckUtils]: 6: Hoare triple {16918#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {16918#true} is VALID [2022-02-20 18:12:07,899 INFO L290 TraceCheckUtils]: 7: Hoare triple {16918#true} assume !(0 != ~pumpRunning~0); {16918#true} is VALID [2022-02-20 18:12:07,899 INFO L290 TraceCheckUtils]: 8: Hoare triple {16918#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,899 INFO L290 TraceCheckUtils]: 9: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,900 INFO L272 TraceCheckUtils]: 10: Hoare triple {16964#(not (= 0 ~systemActive~0))} call processEnvironment__wrappee__highWaterSensor(); {16976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 11: Hoare triple {16976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 12: Hoare triple {16918#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 13: Hoare triple {16918#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 14: Hoare triple {16918#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 15: Hoare triple {16918#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 16: Hoare triple {16918#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 17: Hoare triple {16918#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 18: Hoare triple {16918#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 19: Hoare triple {16918#true} assume { :end_inline_activatePump } true; {16918#true} is VALID [2022-02-20 18:12:07,900 INFO L290 TraceCheckUtils]: 20: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,901 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {16918#true} {16964#(not (= 0 ~systemActive~0))} #253#return; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,901 INFO L290 TraceCheckUtils]: 22: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,901 INFO L290 TraceCheckUtils]: 23: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,901 INFO L290 TraceCheckUtils]: 24: Hoare triple {16964#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,902 INFO L290 TraceCheckUtils]: 25: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,902 INFO L290 TraceCheckUtils]: 26: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,902 INFO L290 TraceCheckUtils]: 27: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,903 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {16964#(not (= 0 ~systemActive~0))} {16923#(= 0 ~systemActive~0)} #263#return; {16919#false} is VALID [2022-02-20 18:12:07,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-02-20 18:12:07,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,905 INFO L290 TraceCheckUtils]: 0: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,905 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,905 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16918#true} {16919#false} #247#return; {16919#false} is VALID [2022-02-20 18:12:07,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-02-20 18:12:07,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:07,907 INFO L290 TraceCheckUtils]: 0: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,907 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,907 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {16918#true} {16919#false} #255#return; {16919#false} is VALID [2022-02-20 18:12:07,907 INFO L290 TraceCheckUtils]: 0: Hoare triple {16918#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 1: Hoare triple {16918#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 2: Hoare triple {16918#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 3: Hoare triple {16918#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 4: Hoare triple {16918#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 5: Hoare triple {16918#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 6: Hoare triple {16918#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 7: Hoare triple {16918#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 8: Hoare triple {16918#true} assume !false; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 9: Hoare triple {16918#true} assume test_~splverifierCounter~0#1 < 4; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 10: Hoare triple {16918#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {16918#true} is VALID [2022-02-20 18:12:07,908 INFO L290 TraceCheckUtils]: 11: Hoare triple {16918#true} assume 0 != test_~tmp~4#1; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L272 TraceCheckUtils]: 12: Hoare triple {16918#true} call waterRise(); {16959#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 13: Hoare triple {16959#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 14: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {16918#true} {16918#true} #257#return; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 16: Hoare triple {16918#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 17: Hoare triple {16918#true} assume !(0 != test_~tmp___0~1#1); {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 18: Hoare triple {16918#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 19: Hoare triple {16918#true} assume !(0 != test_~tmp___2~0#1);assume -2147483648 <= test_#t~nondet21#1 && test_#t~nondet21#1 <= 2147483647;test_~tmp___1~0#1 := test_#t~nondet21#1;havoc test_#t~nondet21#1; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 20: Hoare triple {16918#true} assume 0 != test_~tmp___1~0#1;assume { :begin_inline_stopSystem } true; {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 21: Hoare triple {16918#true} assume !(0 != ~pumpRunning~0); {16918#true} is VALID [2022-02-20 18:12:07,909 INFO L290 TraceCheckUtils]: 22: Hoare triple {16918#true} ~systemActive~0 := 0; {16923#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 23: Hoare triple {16923#(= 0 ~systemActive~0)} assume { :end_inline_stopSystem } true; {16923#(= 0 ~systemActive~0)} is VALID [2022-02-20 18:12:07,910 INFO L272 TraceCheckUtils]: 24: Hoare triple {16923#(= 0 ~systemActive~0)} call timeShift(); {16960#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 25: Hoare triple {16960#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L272 TraceCheckUtils]: 26: Hoare triple {16918#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 27: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 28: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {16918#true} {16918#true} #247#return; {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 30: Hoare triple {16918#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16918#true} is VALID [2022-02-20 18:12:07,910 INFO L290 TraceCheckUtils]: 31: Hoare triple {16918#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {16918#true} is VALID [2022-02-20 18:12:07,911 INFO L290 TraceCheckUtils]: 32: Hoare triple {16918#true} assume !(0 != ~pumpRunning~0); {16918#true} is VALID [2022-02-20 18:12:07,911 INFO L290 TraceCheckUtils]: 33: Hoare triple {16918#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,911 INFO L290 TraceCheckUtils]: 34: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,911 INFO L272 TraceCheckUtils]: 35: Hoare triple {16964#(not (= 0 ~systemActive~0))} call processEnvironment__wrappee__highWaterSensor(); {16976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:07,911 INFO L290 TraceCheckUtils]: 36: Hoare triple {16976#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 37: Hoare triple {16918#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 38: Hoare triple {16918#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 39: Hoare triple {16918#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 40: Hoare triple {16918#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 41: Hoare triple {16918#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 42: Hoare triple {16918#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 43: Hoare triple {16918#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 44: Hoare triple {16918#true} assume { :end_inline_activatePump } true; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L290 TraceCheckUtils]: 45: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,912 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {16918#true} {16964#(not (= 0 ~systemActive~0))} #253#return; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,913 INFO L290 TraceCheckUtils]: 47: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :end_inline_processEnvironment } true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,913 INFO L290 TraceCheckUtils]: 48: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,913 INFO L290 TraceCheckUtils]: 49: Hoare triple {16964#(not (= 0 ~systemActive~0))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,913 INFO L290 TraceCheckUtils]: 50: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,914 INFO L290 TraceCheckUtils]: 51: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,914 INFO L290 TraceCheckUtils]: 52: Hoare triple {16964#(not (= 0 ~systemActive~0))} assume true; {16964#(not (= 0 ~systemActive~0))} is VALID [2022-02-20 18:12:07,914 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {16964#(not (= 0 ~systemActive~0))} {16923#(= 0 ~systemActive~0)} #263#return; {16919#false} is VALID [2022-02-20 18:12:07,914 INFO L290 TraceCheckUtils]: 54: Hoare triple {16919#false} assume !false; {16919#false} is VALID [2022-02-20 18:12:07,914 INFO L290 TraceCheckUtils]: 55: Hoare triple {16919#false} assume test_~splverifierCounter~0#1 < 4; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 56: Hoare triple {16919#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 57: Hoare triple {16919#false} assume !(0 != test_~tmp~4#1); {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 58: Hoare triple {16919#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 59: Hoare triple {16919#false} assume !(0 != test_~tmp___0~1#1); {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 60: Hoare triple {16919#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 61: Hoare triple {16919#false} assume 0 != test_~tmp___2~0#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L272 TraceCheckUtils]: 62: Hoare triple {16919#false} call timeShift(); {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 63: Hoare triple {16919#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L272 TraceCheckUtils]: 64: Hoare triple {16919#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {16918#true} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 65: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 66: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,915 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {16918#true} {16919#false} #247#return; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 68: Hoare triple {16919#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 69: Hoare triple {16919#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 70: Hoare triple {16919#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {16919#false} is VALID [2022-02-20 18:12:07,915 INFO L290 TraceCheckUtils]: 71: Hoare triple {16919#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 72: Hoare triple {16919#false} assume { :end_inline_lowerWaterLevel } true; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 73: Hoare triple {16919#false} assume !(0 != ~systemActive~0); {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 74: Hoare triple {16919#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 75: Hoare triple {16919#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 76: Hoare triple {16919#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L272 TraceCheckUtils]: 77: Hoare triple {16919#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {16918#true} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 78: Hoare triple {16918#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {16918#true} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 79: Hoare triple {16918#true} assume true; {16918#true} is VALID [2022-02-20 18:12:07,916 INFO L284 TraceCheckUtils]: 80: Hoare quadruple {16918#true} {16919#false} #255#return; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 81: Hoare triple {16919#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 82: Hoare triple {16919#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 83: Hoare triple {16919#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L290 TraceCheckUtils]: 84: Hoare triple {16919#false} assume !false; {16919#false} is VALID [2022-02-20 18:12:07,916 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-20 18:12:07,917 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:07,917 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400787924] [2022-02-20 18:12:07,917 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400787924] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:07,917 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:07,917 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-20 18:12:07,917 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1098390526] [2022-02-20 18:12:07,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:07,917 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 85 [2022-02-20 18:12:07,918 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:07,918 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:12:07,957 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 81 edges. 81 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:07,957 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-20 18:12:07,957 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:07,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-20 18:12:07,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-20 18:12:07,958 INFO L87 Difference]: Start difference. First operand 1083 states and 1372 transitions. Second operand has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:12:08,821 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:08,821 INFO L93 Difference]: Finished difference Result 1319 states and 1661 transitions. [2022-02-20 18:12:08,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-20 18:12:08,822 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 85 [2022-02-20 18:12:08,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:08,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:12:08,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 312 transitions. [2022-02-20 18:12:08,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:12:08,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 312 transitions. [2022-02-20 18:12:08,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 312 transitions. [2022-02-20 18:12:09,016 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 312 edges. 312 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:09,033 INFO L225 Difference]: With dead ends: 1319 [2022-02-20 18:12:09,033 INFO L226 Difference]: Without dead ends: 556 [2022-02-20 18:12:09,034 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-02-20 18:12:09,036 INFO L933 BasicCegarLoop]: 136 mSDtfsCounter, 248 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 405 SdHoareTripleChecker+Invalid, 302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:09,036 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [257 Valid, 405 Invalid, 302 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-20 18:12:09,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2022-02-20 18:12:09,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 530. [2022-02-20 18:12:09,120 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:09,121 INFO L82 GeneralOperation]: Start isEquivalent. First operand 556 states. Second operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) [2022-02-20 18:12:09,122 INFO L74 IsIncluded]: Start isIncluded. First operand 556 states. Second operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) [2022-02-20 18:12:09,122 INFO L87 Difference]: Start difference. First operand 556 states. Second operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) [2022-02-20 18:12:09,136 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:09,136 INFO L93 Difference]: Finished difference Result 556 states and 685 transitions. [2022-02-20 18:12:09,136 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 685 transitions. [2022-02-20 18:12:09,137 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:09,137 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:09,138 INFO L74 IsIncluded]: Start isIncluded. First operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) Second operand 556 states. [2022-02-20 18:12:09,139 INFO L87 Difference]: Start difference. First operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) Second operand 556 states. [2022-02-20 18:12:09,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:09,152 INFO L93 Difference]: Finished difference Result 556 states and 685 transitions. [2022-02-20 18:12:09,152 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 685 transitions. [2022-02-20 18:12:09,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:09,154 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:09,154 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:09,154 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:09,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 530 states, 402 states have (on average 1.1965174129353233) internal successors, (481), 426 states have internal predecessors, (481), 68 states have call successors, (68), 51 states have call predecessors, (68), 59 states have return successors, (107), 68 states have call predecessors, (107), 68 states have call successors, (107) [2022-02-20 18:12:09,169 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 530 states to 530 states and 656 transitions. [2022-02-20 18:12:09,170 INFO L78 Accepts]: Start accepts. Automaton has 530 states and 656 transitions. Word has length 85 [2022-02-20 18:12:09,170 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:09,170 INFO L470 AbstractCegarLoop]: Abstraction has 530 states and 656 transitions. [2022-02-20 18:12:09,170 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 9.714285714285714) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2022-02-20 18:12:09,170 INFO L276 IsEmpty]: Start isEmpty. Operand 530 states and 656 transitions. [2022-02-20 18:12:09,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-02-20 18:12:09,171 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:09,171 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:09,171 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-20 18:12:09,171 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:09,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:09,172 INFO L85 PathProgramCache]: Analyzing trace with hash 1627346287, now seen corresponding path program 1 times [2022-02-20 18:12:09,172 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:09,172 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312774745] [2022-02-20 18:12:09,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:09,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:09,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:09,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,253 INFO L290 TraceCheckUtils]: 0: Hoare triple {20728#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20677#true} is VALID [2022-02-20 18:12:09,253 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,253 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20677#true} {20679#(= 1 ~systemActive~0)} #257#return; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:09,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:09,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,279 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,280 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,280 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20677#true} {20677#true} #247#return; {20677#true} is VALID [2022-02-20 18:12:09,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:09,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 0: Hoare triple {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 2: Hoare triple {20677#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 3: Hoare triple {20677#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {20677#true} is VALID [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 4: Hoare triple {20677#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20677#true} is VALID [2022-02-20 18:12:09,292 INFO L290 TraceCheckUtils]: 5: Hoare triple {20677#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20677#true} is VALID [2022-02-20 18:12:09,293 INFO L290 TraceCheckUtils]: 6: Hoare triple {20677#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20677#true} is VALID [2022-02-20 18:12:09,294 INFO L290 TraceCheckUtils]: 7: Hoare triple {20677#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,294 INFO L290 TraceCheckUtils]: 8: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,294 INFO L290 TraceCheckUtils]: 9: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,294 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #253#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 0: Hoare triple {20729#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L272 TraceCheckUtils]: 1: Hoare triple {20677#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 2: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 3: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20677#true} {20677#true} #247#return; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 5: Hoare triple {20677#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 6: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 7: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 8: Hoare triple {20677#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 9: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,295 INFO L272 TraceCheckUtils]: 10: Hoare triple {20677#true} call processEnvironment__wrappee__highWaterSensor(); {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:09,295 INFO L290 TraceCheckUtils]: 11: Hoare triple {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 12: Hoare triple {20677#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 13: Hoare triple {20677#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 14: Hoare triple {20677#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 15: Hoare triple {20677#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 16: Hoare triple {20677#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 17: Hoare triple {20677#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20677#true} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 18: Hoare triple {20677#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,296 INFO L290 TraceCheckUtils]: 19: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,297 INFO L290 TraceCheckUtils]: 20: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,297 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #253#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,297 INFO L290 TraceCheckUtils]: 22: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,297 INFO L290 TraceCheckUtils]: 23: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,298 INFO L290 TraceCheckUtils]: 24: Hoare triple {20744#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,298 INFO L290 TraceCheckUtils]: 25: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,298 INFO L290 TraceCheckUtils]: 26: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,299 INFO L290 TraceCheckUtils]: 27: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,299 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20679#(= 1 ~systemActive~0)} #263#return; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-02-20 18:12:09,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,309 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:09,309 INFO L290 TraceCheckUtils]: 1: Hoare triple {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:09,310 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} {20712#(not (= ~pumpRunning~0 0))} #247#return; {20716#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1| 0))} is VALID [2022-02-20 18:12:09,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-02-20 18:12:09,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:09,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {20677#true} {20677#true} #269#return; {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L290 TraceCheckUtils]: 0: Hoare triple {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume !(0 == ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L272 TraceCheckUtils]: 2: Hoare triple {20677#true} call processEnvironment__wrappee__base(); {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L290 TraceCheckUtils]: 3: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {20677#true} {20677#true} #269#return; {20677#true} is VALID [2022-02-20 18:12:09,316 INFO L290 TraceCheckUtils]: 5: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,317 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {20677#true} {20717#(not (= ~switchedOnBeforeTS~0 0))} #251#return; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-02-20 18:12:09,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,320 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,320 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,320 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {20677#true} {20717#(not (= ~switchedOnBeforeTS~0 0))} #255#return; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,322 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,322 INFO L290 TraceCheckUtils]: 1: Hoare triple {20679#(= 1 ~systemActive~0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,323 INFO L290 TraceCheckUtils]: 2: Hoare triple {20679#(= 1 ~systemActive~0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,323 INFO L290 TraceCheckUtils]: 3: Hoare triple {20679#(= 1 ~systemActive~0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,323 INFO L290 TraceCheckUtils]: 4: Hoare triple {20679#(= 1 ~systemActive~0)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,324 INFO L290 TraceCheckUtils]: 5: Hoare triple {20679#(= 1 ~systemActive~0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,324 INFO L290 TraceCheckUtils]: 6: Hoare triple {20679#(= 1 ~systemActive~0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,324 INFO L290 TraceCheckUtils]: 7: Hoare triple {20679#(= 1 ~systemActive~0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,324 INFO L290 TraceCheckUtils]: 8: Hoare triple {20679#(= 1 ~systemActive~0)} assume !false; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,325 INFO L290 TraceCheckUtils]: 9: Hoare triple {20679#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0#1 < 4; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,325 INFO L290 TraceCheckUtils]: 10: Hoare triple {20679#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,325 INFO L290 TraceCheckUtils]: 11: Hoare triple {20679#(= 1 ~systemActive~0)} assume 0 != test_~tmp~4#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,326 INFO L272 TraceCheckUtils]: 12: Hoare triple {20679#(= 1 ~systemActive~0)} call waterRise(); {20728#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:09,326 INFO L290 TraceCheckUtils]: 13: Hoare triple {20728#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20677#true} is VALID [2022-02-20 18:12:09,326 INFO L290 TraceCheckUtils]: 14: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,326 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20677#true} {20679#(= 1 ~systemActive~0)} #257#return; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,326 INFO L290 TraceCheckUtils]: 16: Hoare triple {20679#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,327 INFO L290 TraceCheckUtils]: 17: Hoare triple {20679#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1#1); {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,327 INFO L290 TraceCheckUtils]: 18: Hoare triple {20679#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,327 INFO L290 TraceCheckUtils]: 19: Hoare triple {20679#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0#1; {20679#(= 1 ~systemActive~0)} is VALID [2022-02-20 18:12:09,328 INFO L272 TraceCheckUtils]: 20: Hoare triple {20679#(= 1 ~systemActive~0)} call timeShift(); {20729#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 21: Hoare triple {20729#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L272 TraceCheckUtils]: 22: Hoare triple {20677#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 23: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 24: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20677#true} {20677#true} #247#return; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 26: Hoare triple {20677#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 27: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 28: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,328 INFO L290 TraceCheckUtils]: 29: Hoare triple {20677#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20677#true} is VALID [2022-02-20 18:12:09,330 INFO L290 TraceCheckUtils]: 30: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L272 TraceCheckUtils]: 31: Hoare triple {20677#true} call processEnvironment__wrappee__highWaterSensor(); {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 32: Hoare triple {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 33: Hoare triple {20677#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 34: Hoare triple {20677#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 35: Hoare triple {20677#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 36: Hoare triple {20677#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 37: Hoare triple {20677#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20677#true} is VALID [2022-02-20 18:12:09,331 INFO L290 TraceCheckUtils]: 38: Hoare triple {20677#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20677#true} is VALID [2022-02-20 18:12:09,332 INFO L290 TraceCheckUtils]: 39: Hoare triple {20677#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,332 INFO L290 TraceCheckUtils]: 40: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,332 INFO L290 TraceCheckUtils]: 41: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,332 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #253#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,333 INFO L290 TraceCheckUtils]: 43: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,333 INFO L290 TraceCheckUtils]: 44: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,333 INFO L290 TraceCheckUtils]: 45: Hoare triple {20744#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,333 INFO L290 TraceCheckUtils]: 46: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,334 INFO L290 TraceCheckUtils]: 47: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,334 INFO L290 TraceCheckUtils]: 48: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,334 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20679#(= 1 ~systemActive~0)} #263#return; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,335 INFO L290 TraceCheckUtils]: 50: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume !false; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,335 INFO L290 TraceCheckUtils]: 51: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume test_~splverifierCounter~0#1 < 4; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,335 INFO L290 TraceCheckUtils]: 52: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,335 INFO L290 TraceCheckUtils]: 53: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp~4#1); {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,336 INFO L290 TraceCheckUtils]: 54: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,336 INFO L290 TraceCheckUtils]: 55: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume !(0 != test_~tmp___0~1#1); {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,336 INFO L290 TraceCheckUtils]: 56: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,348 INFO L290 TraceCheckUtils]: 57: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume 0 != test_~tmp___2~0#1; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,359 INFO L272 TraceCheckUtils]: 58: Hoare triple {20712#(not (= ~pumpRunning~0 0))} call timeShift(); {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,359 INFO L290 TraceCheckUtils]: 59: Hoare triple {20712#(not (= ~pumpRunning~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20712#(not (= ~pumpRunning~0 0))} is VALID [2022-02-20 18:12:09,359 INFO L272 TraceCheckUtils]: 60: Hoare triple {20712#(not (= ~pumpRunning~0 0))} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:09,359 INFO L290 TraceCheckUtils]: 61: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:09,360 INFO L290 TraceCheckUtils]: 62: Hoare triple {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} assume true; {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} is VALID [2022-02-20 18:12:09,360 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {20746#(= ~pumpRunning~0 |isPumpRunning_#res|)} {20712#(not (= ~pumpRunning~0 0))} #247#return; {20716#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1| 0))} is VALID [2022-02-20 18:12:09,360 INFO L290 TraceCheckUtils]: 64: Hoare triple {20716#(not (= |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1| 0))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,361 INFO L290 TraceCheckUtils]: 65: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,361 INFO L290 TraceCheckUtils]: 66: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,361 INFO L290 TraceCheckUtils]: 67: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,362 INFO L290 TraceCheckUtils]: 68: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_lowerWaterLevel } true; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,362 INFO L290 TraceCheckUtils]: 69: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,362 INFO L290 TraceCheckUtils]: 70: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,362 INFO L290 TraceCheckUtils]: 71: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,363 INFO L290 TraceCheckUtils]: 72: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,363 INFO L290 TraceCheckUtils]: 73: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume !(0 != processEnvironment_~tmp~1#1); {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,363 INFO L272 TraceCheckUtils]: 74: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} call processEnvironment__wrappee__highWaterSensor(); {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:09,363 INFO L290 TraceCheckUtils]: 75: Hoare triple {20745#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,363 INFO L290 TraceCheckUtils]: 76: Hoare triple {20677#true} assume !(0 == ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,364 INFO L272 TraceCheckUtils]: 77: Hoare triple {20677#true} call processEnvironment__wrappee__base(); {20677#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 78: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,364 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20677#true} {20677#true} #269#return; {20677#true} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 80: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,364 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20677#true} {20717#(not (= ~switchedOnBeforeTS~0 0))} #251#return; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,364 INFO L290 TraceCheckUtils]: 82: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume { :end_inline_processEnvironment } true; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 83: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 84: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 85: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,365 INFO L272 TraceCheckUtils]: 86: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 87: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,365 INFO L290 TraceCheckUtils]: 88: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,366 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {20677#true} {20717#(not (= ~switchedOnBeforeTS~0 0))} #255#return; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 90: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 91: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {20717#(not (= ~switchedOnBeforeTS~0 0))} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 92: Hoare triple {20717#(not (= ~switchedOnBeforeTS~0 0))} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20678#false} is VALID [2022-02-20 18:12:09,366 INFO L290 TraceCheckUtils]: 93: Hoare triple {20678#false} assume !false; {20678#false} is VALID [2022-02-20 18:12:09,367 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 8 proven. 18 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:09,367 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:09,367 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312774745] [2022-02-20 18:12:09,367 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1312774745] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:09,367 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1867486632] [2022-02-20 18:12:09,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:09,367 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:09,367 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:09,369 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:09,401 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-02-20 18:12:09,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,471 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 8 conjunts are in the unsatisfiable core [2022-02-20 18:12:09,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:09,503 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 2: Hoare triple {20677#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 3: Hoare triple {20677#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 4: Hoare triple {20677#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 5: Hoare triple {20677#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 6: Hoare triple {20677#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 7: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20677#true} is VALID [2022-02-20 18:12:09,825 INFO L290 TraceCheckUtils]: 8: Hoare triple {20677#true} assume !false; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 9: Hoare triple {20677#true} assume test_~splverifierCounter~0#1 < 4; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 10: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 11: Hoare triple {20677#true} assume 0 != test_~tmp~4#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L272 TraceCheckUtils]: 12: Hoare triple {20677#true} call waterRise(); {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 13: Hoare triple {20677#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 14: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20677#true} {20677#true} #257#return; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 16: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 17: Hoare triple {20677#true} assume !(0 != test_~tmp___0~1#1); {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 18: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 19: Hoare triple {20677#true} assume 0 != test_~tmp___2~0#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L272 TraceCheckUtils]: 20: Hoare triple {20677#true} call timeShift(); {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L290 TraceCheckUtils]: 21: Hoare triple {20677#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,826 INFO L272 TraceCheckUtils]: 22: Hoare triple {20677#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 23: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 24: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20677#true} {20677#true} #247#return; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 26: Hoare triple {20677#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 27: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 28: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 29: Hoare triple {20677#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 30: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L272 TraceCheckUtils]: 31: Hoare triple {20677#true} call processEnvironment__wrappee__highWaterSensor(); {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 32: Hoare triple {20677#true} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 33: Hoare triple {20677#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 34: Hoare triple {20677#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 35: Hoare triple {20677#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {20677#true} is VALID [2022-02-20 18:12:09,827 INFO L290 TraceCheckUtils]: 36: Hoare triple {20677#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20677#true} is VALID [2022-02-20 18:12:09,828 INFO L290 TraceCheckUtils]: 37: Hoare triple {20677#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20677#true} is VALID [2022-02-20 18:12:09,828 INFO L290 TraceCheckUtils]: 38: Hoare triple {20677#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20677#true} is VALID [2022-02-20 18:12:09,828 INFO L290 TraceCheckUtils]: 39: Hoare triple {20677#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,828 INFO L290 TraceCheckUtils]: 40: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,829 INFO L290 TraceCheckUtils]: 41: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,829 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #253#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,829 INFO L290 TraceCheckUtils]: 43: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,829 INFO L290 TraceCheckUtils]: 44: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,830 INFO L290 TraceCheckUtils]: 45: Hoare triple {20744#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,830 INFO L290 TraceCheckUtils]: 46: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,830 INFO L290 TraceCheckUtils]: 47: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,831 INFO L290 TraceCheckUtils]: 48: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,831 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #263#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,831 INFO L290 TraceCheckUtils]: 50: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !false; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,831 INFO L290 TraceCheckUtils]: 51: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,832 INFO L290 TraceCheckUtils]: 52: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,832 INFO L290 TraceCheckUtils]: 53: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,832 INFO L290 TraceCheckUtils]: 54: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,832 INFO L290 TraceCheckUtils]: 55: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,833 INFO L290 TraceCheckUtils]: 56: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,833 INFO L290 TraceCheckUtils]: 57: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,833 INFO L272 TraceCheckUtils]: 58: Hoare triple {20744#(<= 1 ~pumpRunning~0)} call timeShift(); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,833 INFO L290 TraceCheckUtils]: 59: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,834 INFO L272 TraceCheckUtils]: 60: Hoare triple {20744#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:09,834 INFO L290 TraceCheckUtils]: 61: Hoare triple {20744#(<= 1 ~pumpRunning~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20935#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:09,834 INFO L290 TraceCheckUtils]: 62: Hoare triple {20935#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} assume true; {20935#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} is VALID [2022-02-20 18:12:09,835 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {20935#(and (<= 1 ~pumpRunning~0) (<= ~pumpRunning~0 |isPumpRunning_#res|))} {20744#(<= 1 ~pumpRunning~0)} #247#return; {20942#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1|)} is VALID [2022-02-20 18:12:09,835 INFO L290 TraceCheckUtils]: 64: Hoare triple {20942#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,835 INFO L290 TraceCheckUtils]: 65: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,836 INFO L290 TraceCheckUtils]: 66: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,836 INFO L290 TraceCheckUtils]: 67: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,836 INFO L290 TraceCheckUtils]: 68: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,836 INFO L290 TraceCheckUtils]: 69: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,837 INFO L290 TraceCheckUtils]: 70: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,837 INFO L290 TraceCheckUtils]: 71: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,837 INFO L290 TraceCheckUtils]: 72: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,837 INFO L290 TraceCheckUtils]: 73: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~1#1); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,838 INFO L272 TraceCheckUtils]: 74: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,838 INFO L290 TraceCheckUtils]: 75: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} havoc ~tmp~0#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,838 INFO L290 TraceCheckUtils]: 76: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 == ~pumpRunning~0); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,839 INFO L272 TraceCheckUtils]: 77: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__base(); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,839 INFO L290 TraceCheckUtils]: 78: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,839 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20946#(<= 1 ~switchedOnBeforeTS~0)} {20946#(<= 1 ~switchedOnBeforeTS~0)} #269#return; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,839 INFO L290 TraceCheckUtils]: 80: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,840 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20946#(<= 1 ~switchedOnBeforeTS~0)} {20946#(<= 1 ~switchedOnBeforeTS~0)} #251#return; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,840 INFO L290 TraceCheckUtils]: 82: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,840 INFO L290 TraceCheckUtils]: 83: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,840 INFO L290 TraceCheckUtils]: 84: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,841 INFO L290 TraceCheckUtils]: 85: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,841 INFO L272 TraceCheckUtils]: 86: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,841 INFO L290 TraceCheckUtils]: 87: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,841 INFO L290 TraceCheckUtils]: 88: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,842 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {20946#(<= 1 ~switchedOnBeforeTS~0)} {20946#(<= 1 ~switchedOnBeforeTS~0)} #255#return; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,842 INFO L290 TraceCheckUtils]: 90: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,842 INFO L290 TraceCheckUtils]: 91: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:09,842 INFO L290 TraceCheckUtils]: 92: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20678#false} is VALID [2022-02-20 18:12:09,843 INFO L290 TraceCheckUtils]: 93: Hoare triple {20678#false} assume !false; {20678#false} is VALID [2022-02-20 18:12:09,843 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 24 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-20 18:12:09,843 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:10,235 INFO L290 TraceCheckUtils]: 93: Hoare triple {20678#false} assume !false; {20678#false} is VALID [2022-02-20 18:12:10,235 INFO L290 TraceCheckUtils]: 92: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {20678#false} is VALID [2022-02-20 18:12:10,235 INFO L290 TraceCheckUtils]: 91: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,236 INFO L290 TraceCheckUtils]: 90: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,236 INFO L284 TraceCheckUtils]: 89: Hoare quadruple {20677#true} {20946#(<= 1 ~switchedOnBeforeTS~0)} #255#return; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,236 INFO L290 TraceCheckUtils]: 88: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:10,236 INFO L290 TraceCheckUtils]: 87: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:10,236 INFO L272 TraceCheckUtils]: 86: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:10,237 INFO L290 TraceCheckUtils]: 85: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,237 INFO L290 TraceCheckUtils]: 84: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,237 INFO L290 TraceCheckUtils]: 83: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,237 INFO L290 TraceCheckUtils]: 82: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_processEnvironment } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,238 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {20677#true} {20946#(<= 1 ~switchedOnBeforeTS~0)} #251#return; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,238 INFO L290 TraceCheckUtils]: 80: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {20677#true} {20677#true} #269#return; {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L290 TraceCheckUtils]: 78: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L272 TraceCheckUtils]: 77: Hoare triple {20677#true} call processEnvironment__wrappee__base(); {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L290 TraceCheckUtils]: 76: Hoare triple {20677#true} assume !(0 == ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L290 TraceCheckUtils]: 75: Hoare triple {20677#true} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L272 TraceCheckUtils]: 74: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} call processEnvironment__wrappee__highWaterSensor(); {20677#true} is VALID [2022-02-20 18:12:10,238 INFO L290 TraceCheckUtils]: 73: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume !(0 != processEnvironment_~tmp~1#1); {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,239 INFO L290 TraceCheckUtils]: 72: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,239 INFO L290 TraceCheckUtils]: 71: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,239 INFO L290 TraceCheckUtils]: 70: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,240 INFO L290 TraceCheckUtils]: 69: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,240 INFO L290 TraceCheckUtils]: 68: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline_lowerWaterLevel } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,240 INFO L290 TraceCheckUtils]: 67: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,240 INFO L290 TraceCheckUtils]: 66: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,241 INFO L290 TraceCheckUtils]: 65: Hoare triple {20946#(<= 1 ~switchedOnBeforeTS~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,241 INFO L290 TraceCheckUtils]: 64: Hoare triple {20942#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20946#(<= 1 ~switchedOnBeforeTS~0)} is VALID [2022-02-20 18:12:10,241 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {21127#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} {20744#(<= 1 ~pumpRunning~0)} #247#return; {20942#(<= 1 |timeShift___utac_acc__Specification5_spec__2_#t~ret22#1|)} is VALID [2022-02-20 18:12:10,242 INFO L290 TraceCheckUtils]: 62: Hoare triple {21127#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} assume true; {21127#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:10,242 INFO L290 TraceCheckUtils]: 61: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {21127#(or (<= 1 |isPumpRunning_#res|) (not (<= 1 ~pumpRunning~0)))} is VALID [2022-02-20 18:12:10,242 INFO L272 TraceCheckUtils]: 60: Hoare triple {20744#(<= 1 ~pumpRunning~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:10,242 INFO L290 TraceCheckUtils]: 59: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,243 INFO L272 TraceCheckUtils]: 58: Hoare triple {20744#(<= 1 ~pumpRunning~0)} call timeShift(); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,243 INFO L290 TraceCheckUtils]: 57: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,243 INFO L290 TraceCheckUtils]: 56: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,244 INFO L290 TraceCheckUtils]: 55: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,244 INFO L290 TraceCheckUtils]: 54: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,244 INFO L290 TraceCheckUtils]: 53: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~4#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,244 INFO L290 TraceCheckUtils]: 52: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,245 INFO L290 TraceCheckUtils]: 51: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0#1 < 4; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,245 INFO L290 TraceCheckUtils]: 50: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !false; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,245 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #263#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,245 INFO L290 TraceCheckUtils]: 48: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,246 INFO L290 TraceCheckUtils]: 47: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,246 INFO L290 TraceCheckUtils]: 46: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,246 INFO L290 TraceCheckUtils]: 45: Hoare triple {20744#(<= 1 ~pumpRunning~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,247 INFO L290 TraceCheckUtils]: 44: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,247 INFO L290 TraceCheckUtils]: 43: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_processEnvironment } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,247 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {20744#(<= 1 ~pumpRunning~0)} {20677#true} #253#return; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,247 INFO L290 TraceCheckUtils]: 41: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 40: Hoare triple {20744#(<= 1 ~pumpRunning~0)} assume { :end_inline_activatePump } true; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 39: Hoare triple {20677#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {20744#(<= 1 ~pumpRunning~0)} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 38: Hoare triple {20677#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 37: Hoare triple {20677#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 36: Hoare triple {20677#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 35: Hoare triple {20677#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 34: Hoare triple {20677#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 33: Hoare triple {20677#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {20677#true} is VALID [2022-02-20 18:12:10,248 INFO L290 TraceCheckUtils]: 32: Hoare triple {20677#true} havoc ~tmp~0#1; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L272 TraceCheckUtils]: 31: Hoare triple {20677#true} call processEnvironment__wrappee__highWaterSensor(); {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 30: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 29: Hoare triple {20677#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 28: Hoare triple {20677#true} assume !(0 != ~pumpRunning~0); {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 27: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 26: Hoare triple {20677#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {20677#true} {20677#true} #247#return; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 24: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 23: Hoare triple {20677#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L272 TraceCheckUtils]: 22: Hoare triple {20677#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 21: Hoare triple {20677#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L272 TraceCheckUtils]: 20: Hoare triple {20677#true} call timeShift(); {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 19: Hoare triple {20677#true} assume 0 != test_~tmp___2~0#1; {20677#true} is VALID [2022-02-20 18:12:10,249 INFO L290 TraceCheckUtils]: 18: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 17: Hoare triple {20677#true} assume !(0 != test_~tmp___0~1#1); {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 16: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {20677#true} {20677#true} #257#return; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 14: Hoare triple {20677#true} assume true; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 13: Hoare triple {20677#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L272 TraceCheckUtils]: 12: Hoare triple {20677#true} call waterRise(); {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 11: Hoare triple {20677#true} assume 0 != test_~tmp~4#1; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 10: Hoare triple {20677#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 9: Hoare triple {20677#true} assume test_~splverifierCounter~0#1 < 4; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 8: Hoare triple {20677#true} assume !false; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 7: Hoare triple {20677#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 6: Hoare triple {20677#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 5: Hoare triple {20677#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 4: Hoare triple {20677#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {20677#true} is VALID [2022-02-20 18:12:10,250 INFO L290 TraceCheckUtils]: 3: Hoare triple {20677#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {20677#true} is VALID [2022-02-20 18:12:10,251 INFO L290 TraceCheckUtils]: 2: Hoare triple {20677#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {20677#true} is VALID [2022-02-20 18:12:10,251 INFO L290 TraceCheckUtils]: 1: Hoare triple {20677#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {20677#true} is VALID [2022-02-20 18:12:10,251 INFO L290 TraceCheckUtils]: 0: Hoare triple {20677#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {20677#true} is VALID [2022-02-20 18:12:10,251 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-02-20 18:12:10,251 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1867486632] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:10,251 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:10,251 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-02-20 18:12:10,251 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963427424] [2022-02-20 18:12:10,252 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:10,253 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2022-02-20 18:12:10,253 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:10,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:10,343 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 166 edges. 166 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:10,343 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-02-20 18:12:10,344 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:10,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-02-20 18:12:10,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:10,344 INFO L87 Difference]: Start difference. First operand 530 states and 656 transitions. Second operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:13,215 INFO L93 Difference]: Finished difference Result 1137 states and 1441 transitions. [2022-02-20 18:12:13,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-02-20 18:12:13,216 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) Word has length 94 [2022-02-20 18:12:13,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:13,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 421 transitions. [2022-02-20 18:12:13,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 421 transitions. [2022-02-20 18:12:13,225 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 32 states and 421 transitions. [2022-02-20 18:12:13,519 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 421 edges. 421 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:13,541 INFO L225 Difference]: With dead ends: 1137 [2022-02-20 18:12:13,541 INFO L226 Difference]: Without dead ends: 663 [2022-02-20 18:12:13,545 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 254 GetRequests, 211 SyntacticMatches, 1 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 448 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=441, Invalid=1451, Unknown=0, NotChecked=0, Total=1892 [2022-02-20 18:12:13,545 INFO L933 BasicCegarLoop]: 206 mSDtfsCounter, 385 mSDsluCounter, 963 mSDsCounter, 0 mSdLazyCounter, 868 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 388 SdHoareTripleChecker+Valid, 1169 SdHoareTripleChecker+Invalid, 1064 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 868 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:13,546 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [388 Valid, 1169 Invalid, 1064 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 868 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-02-20 18:12:13,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 663 states. [2022-02-20 18:12:13,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 663 to 591. [2022-02-20 18:12:13,749 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:13,750 INFO L82 GeneralOperation]: Start isEquivalent. First operand 663 states. Second operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) [2022-02-20 18:12:13,751 INFO L74 IsIncluded]: Start isIncluded. First operand 663 states. Second operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) [2022-02-20 18:12:13,751 INFO L87 Difference]: Start difference. First operand 663 states. Second operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) [2022-02-20 18:12:13,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:13,768 INFO L93 Difference]: Finished difference Result 663 states and 797 transitions. [2022-02-20 18:12:13,768 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 797 transitions. [2022-02-20 18:12:13,769 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:13,769 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:13,771 INFO L74 IsIncluded]: Start isIncluded. First operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) Second operand 663 states. [2022-02-20 18:12:13,771 INFO L87 Difference]: Start difference. First operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) Second operand 663 states. [2022-02-20 18:12:13,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:13,788 INFO L93 Difference]: Finished difference Result 663 states and 797 transitions. [2022-02-20 18:12:13,788 INFO L276 IsEmpty]: Start isEmpty. Operand 663 states and 797 transitions. [2022-02-20 18:12:13,789 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:13,790 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:13,790 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:13,790 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:13,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 442 states have (on average 1.1787330316742082) internal successors, (521), 474 states have internal predecessors, (521), 78 states have call successors, (78), 65 states have call predecessors, (78), 70 states have return successors, (103), 73 states have call predecessors, (103), 78 states have call successors, (103) [2022-02-20 18:12:13,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 702 transitions. [2022-02-20 18:12:13,808 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 702 transitions. Word has length 94 [2022-02-20 18:12:13,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:13,809 INFO L470 AbstractCegarLoop]: Abstraction has 591 states and 702 transitions. [2022-02-20 18:12:13,809 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 8.6) internal successors, (129), 10 states have internal predecessors, (129), 6 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (17), 8 states have call predecessors, (17), 6 states have call successors, (17) [2022-02-20 18:12:13,809 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 702 transitions. [2022-02-20 18:12:13,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 168 [2022-02-20 18:12:13,811 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:13,811 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:13,830 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:14,030 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-02-20 18:12:14,030 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:14,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:14,030 INFO L85 PathProgramCache]: Analyzing trace with hash -429186901, now seen corresponding path program 1 times [2022-02-20 18:12:14,030 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:14,031 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711345357] [2022-02-20 18:12:14,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:14,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:14,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:14,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,096 INFO L290 TraceCheckUtils]: 0: Hoare triple {25223#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25115#true} is VALID [2022-02-20 18:12:14,096 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,096 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #257#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:14,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,114 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,114 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,114 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:14,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,123 INFO L290 TraceCheckUtils]: 0: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,123 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,123 INFO L290 TraceCheckUtils]: 2: Hoare triple {25115#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,123 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {25115#true} is VALID [2022-02-20 18:12:14,123 INFO L290 TraceCheckUtils]: 4: Hoare triple {25115#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 6: Hoare triple {25115#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 7: Hoare triple {25115#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 8: Hoare triple {25115#true} assume { :end_inline_activatePump } true; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 9: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25115#true} {25115#true} #253#return; {25115#true} is VALID [2022-02-20 18:12:14,124 INFO L290 TraceCheckUtils]: 0: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L272 TraceCheckUtils]: 1: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 2: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 6: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 7: Hoare triple {25115#true} assume !(0 != ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,125 INFO L290 TraceCheckUtils]: 8: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,126 INFO L290 TraceCheckUtils]: 9: Hoare triple {25115#true} assume !(0 != ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,126 INFO L272 TraceCheckUtils]: 10: Hoare triple {25115#true} call processEnvironment__wrappee__highWaterSensor(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,126 INFO L290 TraceCheckUtils]: 11: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,126 INFO L290 TraceCheckUtils]: 12: Hoare triple {25115#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,126 INFO L290 TraceCheckUtils]: 13: Hoare triple {25115#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,126 INFO L290 TraceCheckUtils]: 14: Hoare triple {25115#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 15: Hoare triple {25115#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 16: Hoare triple {25115#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 17: Hoare triple {25115#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 18: Hoare triple {25115#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 19: Hoare triple {25115#true} assume { :end_inline_activatePump } true; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 20: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {25115#true} {25115#true} #253#return; {25115#true} is VALID [2022-02-20 18:12:14,127 INFO L290 TraceCheckUtils]: 22: Hoare triple {25115#true} assume { :end_inline_processEnvironment } true; {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L290 TraceCheckUtils]: 23: Hoare triple {25115#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L290 TraceCheckUtils]: 24: Hoare triple {25115#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L290 TraceCheckUtils]: 25: Hoare triple {25115#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L290 TraceCheckUtils]: 26: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L290 TraceCheckUtils]: 27: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,128 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:12:14,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,146 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,146 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,146 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:14,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:14,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,151 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,151 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {25115#true} {25115#true} #269#return; {25115#true} is VALID [2022-02-20 18:12:14,151 INFO L290 TraceCheckUtils]: 0: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,151 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume !(0 == ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,151 INFO L272 TraceCheckUtils]: 2: Hoare triple {25115#true} call processEnvironment__wrappee__base(); {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25115#true} {25115#true} #269#return; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {25115#true} {25115#true} #251#return; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L290 TraceCheckUtils]: 0: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L272 TraceCheckUtils]: 1: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L290 TraceCheckUtils]: 2: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,152 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 6: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 7: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 8: Hoare triple {25115#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 9: Hoare triple {25115#true} assume { :end_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 10: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,153 INFO L290 TraceCheckUtils]: 11: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {25115#true} is VALID [2022-02-20 18:12:14,154 INFO L290 TraceCheckUtils]: 12: Hoare triple {25115#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {25115#true} is VALID [2022-02-20 18:12:14,154 INFO L290 TraceCheckUtils]: 13: Hoare triple {25115#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {25115#true} is VALID [2022-02-20 18:12:14,154 INFO L290 TraceCheckUtils]: 14: Hoare triple {25115#true} assume !(0 != processEnvironment_~tmp~1#1); {25115#true} is VALID [2022-02-20 18:12:14,154 INFO L272 TraceCheckUtils]: 15: Hoare triple {25115#true} call processEnvironment__wrappee__highWaterSensor(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,154 INFO L290 TraceCheckUtils]: 16: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L290 TraceCheckUtils]: 17: Hoare triple {25115#true} assume !(0 == ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L272 TraceCheckUtils]: 18: Hoare triple {25115#true} call processEnvironment__wrappee__base(); {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L290 TraceCheckUtils]: 19: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {25115#true} {25115#true} #269#return; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L290 TraceCheckUtils]: 21: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {25115#true} {25115#true} #251#return; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L290 TraceCheckUtils]: 23: Hoare triple {25115#true} assume { :end_inline_processEnvironment } true; {25115#true} is VALID [2022-02-20 18:12:14,155 INFO L290 TraceCheckUtils]: 24: Hoare triple {25115#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25115#true} is VALID [2022-02-20 18:12:14,156 INFO L290 TraceCheckUtils]: 25: Hoare triple {25115#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25115#true} is VALID [2022-02-20 18:12:14,156 INFO L290 TraceCheckUtils]: 26: Hoare triple {25115#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25115#true} is VALID [2022-02-20 18:12:14,156 INFO L290 TraceCheckUtils]: 27: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25115#true} is VALID [2022-02-20 18:12:14,156 INFO L290 TraceCheckUtils]: 28: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,156 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-02-20 18:12:14,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:14,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,224 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,224 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:14,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,226 INFO L290 TraceCheckUtils]: 0: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25115#true} is VALID [2022-02-20 18:12:14,227 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,227 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25258#(not (= ~methaneLevelCritical~0 0))} #249#return; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,227 INFO L290 TraceCheckUtils]: 0: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,227 INFO L272 TraceCheckUtils]: 1: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 2: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 6: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 7: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 8: Hoare triple {25115#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25115#true} is VALID [2022-02-20 18:12:14,228 INFO L290 TraceCheckUtils]: 9: Hoare triple {25115#true} assume { :end_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,229 INFO L290 TraceCheckUtils]: 10: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,229 INFO L290 TraceCheckUtils]: 11: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {25255#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,229 INFO L290 TraceCheckUtils]: 12: Hoare triple {25255#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {25256#(or (not (= ~methaneLevelCritical~0 0)) (and (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|)))} is VALID [2022-02-20 18:12:14,230 INFO L290 TraceCheckUtils]: 13: Hoare triple {25256#(or (not (= ~methaneLevelCritical~0 0)) (and (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|)))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {25257#(or (not (= ~methaneLevelCritical~0 0)) (and (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1)) (<= |timeShift_processEnvironment_~tmp~1#1| 0)))} is VALID [2022-02-20 18:12:14,230 INFO L290 TraceCheckUtils]: 14: Hoare triple {25257#(or (not (= ~methaneLevelCritical~0 0)) (and (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1)) (<= |timeShift_processEnvironment_~tmp~1#1| 0)))} assume 0 != processEnvironment_~tmp~1#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,231 INFO L272 TraceCheckUtils]: 15: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} call deactivatePump(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,231 INFO L290 TraceCheckUtils]: 16: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25115#true} is VALID [2022-02-20 18:12:14,231 INFO L290 TraceCheckUtils]: 17: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,231 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {25115#true} {25258#(not (= ~methaneLevelCritical~0 0))} #249#return; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,232 INFO L290 TraceCheckUtils]: 19: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_processEnvironment } true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,232 INFO L290 TraceCheckUtils]: 20: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,232 INFO L290 TraceCheckUtils]: 21: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,233 INFO L290 TraceCheckUtils]: 22: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,233 INFO L290 TraceCheckUtils]: 23: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,233 INFO L290 TraceCheckUtils]: 24: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,233 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {25258#(not (= ~methaneLevelCritical~0 0))} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25116#false} is VALID [2022-02-20 18:12:14,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2022-02-20 18:12:14,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,236 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,236 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,236 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25116#false} #247#return; {25116#false} is VALID [2022-02-20 18:12:14,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2022-02-20 18:12:14,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,242 INFO L290 TraceCheckUtils]: 0: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 2: Hoare triple {25115#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 3: Hoare triple {25115#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 4: Hoare triple {25115#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 5: Hoare triple {25115#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {25115#true} is VALID [2022-02-20 18:12:14,243 INFO L290 TraceCheckUtils]: 6: Hoare triple {25115#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {25115#true} is VALID [2022-02-20 18:12:14,244 INFO L290 TraceCheckUtils]: 7: Hoare triple {25115#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25115#true} is VALID [2022-02-20 18:12:14,244 INFO L290 TraceCheckUtils]: 8: Hoare triple {25115#true} assume { :end_inline_activatePump } true; {25115#true} is VALID [2022-02-20 18:12:14,244 INFO L290 TraceCheckUtils]: 9: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,244 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {25115#true} {25116#false} #253#return; {25116#false} is VALID [2022-02-20 18:12:14,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2022-02-20 18:12:14,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:14,247 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,247 INFO L290 TraceCheckUtils]: 1: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,247 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {25115#true} {25116#false} #255#return; {25116#false} is VALID [2022-02-20 18:12:14,247 INFO L290 TraceCheckUtils]: 0: Hoare triple {25115#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,248 INFO L290 TraceCheckUtils]: 1: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,248 INFO L290 TraceCheckUtils]: 2: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,248 INFO L290 TraceCheckUtils]: 3: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,248 INFO L290 TraceCheckUtils]: 4: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,249 INFO L290 TraceCheckUtils]: 5: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,249 INFO L290 TraceCheckUtils]: 6: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,249 INFO L290 TraceCheckUtils]: 7: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,249 INFO L290 TraceCheckUtils]: 8: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !false; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,250 INFO L290 TraceCheckUtils]: 9: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,250 INFO L290 TraceCheckUtils]: 10: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,250 INFO L290 TraceCheckUtils]: 11: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp~4#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,251 INFO L272 TraceCheckUtils]: 12: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} call waterRise(); {25223#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:14,251 INFO L290 TraceCheckUtils]: 13: Hoare triple {25223#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25115#true} is VALID [2022-02-20 18:12:14,251 INFO L290 TraceCheckUtils]: 14: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,251 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #257#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,252 INFO L290 TraceCheckUtils]: 16: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,252 INFO L290 TraceCheckUtils]: 17: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~1#1); {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,252 INFO L290 TraceCheckUtils]: 18: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,252 INFO L290 TraceCheckUtils]: 19: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,253 INFO L272 TraceCheckUtils]: 20: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} call timeShift(); {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,253 INFO L290 TraceCheckUtils]: 21: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,253 INFO L272 TraceCheckUtils]: 22: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,253 INFO L290 TraceCheckUtils]: 23: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,253 INFO L290 TraceCheckUtils]: 24: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,253 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,253 INFO L290 TraceCheckUtils]: 26: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,254 INFO L290 TraceCheckUtils]: 27: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,254 INFO L290 TraceCheckUtils]: 28: Hoare triple {25115#true} assume !(0 != ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,254 INFO L290 TraceCheckUtils]: 29: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,254 INFO L290 TraceCheckUtils]: 30: Hoare triple {25115#true} assume !(0 != ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,254 INFO L272 TraceCheckUtils]: 31: Hoare triple {25115#true} call processEnvironment__wrappee__highWaterSensor(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,254 INFO L290 TraceCheckUtils]: 32: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 33: Hoare triple {25115#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 34: Hoare triple {25115#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 35: Hoare triple {25115#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 36: Hoare triple {25115#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 37: Hoare triple {25115#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 38: Hoare triple {25115#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 39: Hoare triple {25115#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25115#true} is VALID [2022-02-20 18:12:14,255 INFO L290 TraceCheckUtils]: 40: Hoare triple {25115#true} assume { :end_inline_activatePump } true; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 41: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {25115#true} {25115#true} #253#return; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 43: Hoare triple {25115#true} assume { :end_inline_processEnvironment } true; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 44: Hoare triple {25115#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 45: Hoare triple {25115#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 46: Hoare triple {25115#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 47: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25115#true} is VALID [2022-02-20 18:12:14,256 INFO L290 TraceCheckUtils]: 48: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,257 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,257 INFO L290 TraceCheckUtils]: 50: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !false; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,257 INFO L290 TraceCheckUtils]: 51: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,258 INFO L290 TraceCheckUtils]: 52: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,258 INFO L290 TraceCheckUtils]: 53: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~4#1); {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,258 INFO L290 TraceCheckUtils]: 54: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,258 INFO L290 TraceCheckUtils]: 55: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~1#1); {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,259 INFO L290 TraceCheckUtils]: 56: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,259 INFO L290 TraceCheckUtils]: 57: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,259 INFO L272 TraceCheckUtils]: 58: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} call timeShift(); {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,259 INFO L290 TraceCheckUtils]: 59: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L272 TraceCheckUtils]: 60: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 61: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 62: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 64: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 65: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 66: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,260 INFO L290 TraceCheckUtils]: 67: Hoare triple {25115#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 68: Hoare triple {25115#true} assume { :end_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 69: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 70: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 71: Hoare triple {25115#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 72: Hoare triple {25115#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L290 TraceCheckUtils]: 73: Hoare triple {25115#true} assume !(0 != processEnvironment_~tmp~1#1); {25115#true} is VALID [2022-02-20 18:12:14,261 INFO L272 TraceCheckUtils]: 74: Hoare triple {25115#true} call processEnvironment__wrappee__highWaterSensor(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,262 INFO L290 TraceCheckUtils]: 75: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L290 TraceCheckUtils]: 76: Hoare triple {25115#true} assume !(0 == ~pumpRunning~0); {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L272 TraceCheckUtils]: 77: Hoare triple {25115#true} call processEnvironment__wrappee__base(); {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L290 TraceCheckUtils]: 78: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {25115#true} {25115#true} #269#return; {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L290 TraceCheckUtils]: 80: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {25115#true} {25115#true} #251#return; {25115#true} is VALID [2022-02-20 18:12:14,262 INFO L290 TraceCheckUtils]: 82: Hoare triple {25115#true} assume { :end_inline_processEnvironment } true; {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L290 TraceCheckUtils]: 83: Hoare triple {25115#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L290 TraceCheckUtils]: 84: Hoare triple {25115#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L290 TraceCheckUtils]: 85: Hoare triple {25115#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L290 TraceCheckUtils]: 86: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L290 TraceCheckUtils]: 87: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,263 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {25115#true} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,264 INFO L290 TraceCheckUtils]: 89: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !false; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,264 INFO L290 TraceCheckUtils]: 90: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume test_~splverifierCounter~0#1 < 4; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,264 INFO L290 TraceCheckUtils]: 91: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,265 INFO L290 TraceCheckUtils]: 92: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp~4#1); {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,265 INFO L290 TraceCheckUtils]: 93: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,265 INFO L290 TraceCheckUtils]: 94: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume !(0 != test_~tmp___0~1#1); {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,265 INFO L290 TraceCheckUtils]: 95: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,266 INFO L290 TraceCheckUtils]: 96: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} assume 0 != test_~tmp___2~0#1; {25117#(= ~methaneLevelCritical~0 0)} is VALID [2022-02-20 18:12:14,266 INFO L272 TraceCheckUtils]: 97: Hoare triple {25117#(= ~methaneLevelCritical~0 0)} call timeShift(); {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:14,266 INFO L290 TraceCheckUtils]: 98: Hoare triple {25224#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,266 INFO L272 TraceCheckUtils]: 99: Hoare triple {25115#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,266 INFO L290 TraceCheckUtils]: 100: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 101: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L284 TraceCheckUtils]: 102: Hoare quadruple {25115#true} {25115#true} #247#return; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 103: Hoare triple {25115#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 104: Hoare triple {25115#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 105: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 106: Hoare triple {25115#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 107: Hoare triple {25115#true} assume { :end_inline_lowerWaterLevel } true; {25115#true} is VALID [2022-02-20 18:12:14,267 INFO L290 TraceCheckUtils]: 108: Hoare triple {25115#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25115#true} is VALID [2022-02-20 18:12:14,268 INFO L290 TraceCheckUtils]: 109: Hoare triple {25115#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {25255#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:14,268 INFO L290 TraceCheckUtils]: 110: Hoare triple {25255#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {25256#(or (not (= ~methaneLevelCritical~0 0)) (and (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|)))} is VALID [2022-02-20 18:12:14,269 INFO L290 TraceCheckUtils]: 111: Hoare triple {25256#(or (not (= ~methaneLevelCritical~0 0)) (and (<= |timeShift_isMethaneAlarm_#res#1| 0) (<= 0 |timeShift_isMethaneAlarm_#res#1|)))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {25257#(or (not (= ~methaneLevelCritical~0 0)) (and (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1)) (<= |timeShift_processEnvironment_~tmp~1#1| 0)))} is VALID [2022-02-20 18:12:14,269 INFO L290 TraceCheckUtils]: 112: Hoare triple {25257#(or (not (= ~methaneLevelCritical~0 0)) (and (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1)) (<= |timeShift_processEnvironment_~tmp~1#1| 0)))} assume 0 != processEnvironment_~tmp~1#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,270 INFO L272 TraceCheckUtils]: 113: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} call deactivatePump(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,270 INFO L290 TraceCheckUtils]: 114: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {25115#true} is VALID [2022-02-20 18:12:14,270 INFO L290 TraceCheckUtils]: 115: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,270 INFO L284 TraceCheckUtils]: 116: Hoare quadruple {25115#true} {25258#(not (= ~methaneLevelCritical~0 0))} #249#return; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,270 INFO L290 TraceCheckUtils]: 117: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline_processEnvironment } true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,271 INFO L290 TraceCheckUtils]: 118: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,271 INFO L290 TraceCheckUtils]: 119: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,271 INFO L290 TraceCheckUtils]: 120: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,272 INFO L290 TraceCheckUtils]: 121: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,272 INFO L290 TraceCheckUtils]: 122: Hoare triple {25258#(not (= ~methaneLevelCritical~0 0))} assume true; {25258#(not (= ~methaneLevelCritical~0 0))} is VALID [2022-02-20 18:12:14,272 INFO L284 TraceCheckUtils]: 123: Hoare quadruple {25258#(not (= ~methaneLevelCritical~0 0))} {25117#(= ~methaneLevelCritical~0 0)} #263#return; {25116#false} is VALID [2022-02-20 18:12:14,272 INFO L290 TraceCheckUtils]: 124: Hoare triple {25116#false} assume !false; {25116#false} is VALID [2022-02-20 18:12:14,272 INFO L290 TraceCheckUtils]: 125: Hoare triple {25116#false} assume test_~splverifierCounter~0#1 < 4; {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 126: Hoare triple {25116#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 127: Hoare triple {25116#false} assume !(0 != test_~tmp~4#1); {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 128: Hoare triple {25116#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 129: Hoare triple {25116#false} assume !(0 != test_~tmp___0~1#1); {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 130: Hoare triple {25116#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 131: Hoare triple {25116#false} assume 0 != test_~tmp___2~0#1; {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L272 TraceCheckUtils]: 132: Hoare triple {25116#false} call timeShift(); {25116#false} is VALID [2022-02-20 18:12:14,273 INFO L290 TraceCheckUtils]: 133: Hoare triple {25116#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25116#false} is VALID [2022-02-20 18:12:14,274 INFO L272 TraceCheckUtils]: 134: Hoare triple {25116#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,274 INFO L290 TraceCheckUtils]: 135: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,274 INFO L290 TraceCheckUtils]: 136: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,274 INFO L284 TraceCheckUtils]: 137: Hoare quadruple {25115#true} {25116#false} #247#return; {25116#false} is VALID [2022-02-20 18:12:14,274 INFO L290 TraceCheckUtils]: 138: Hoare triple {25116#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {25116#false} is VALID [2022-02-20 18:12:14,277 INFO L290 TraceCheckUtils]: 139: Hoare triple {25116#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {25116#false} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 140: Hoare triple {25116#false} assume !(0 != ~pumpRunning~0); {25116#false} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 141: Hoare triple {25116#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {25116#false} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 142: Hoare triple {25116#false} assume !(0 != ~pumpRunning~0); {25116#false} is VALID [2022-02-20 18:12:14,278 INFO L272 TraceCheckUtils]: 143: Hoare triple {25116#false} call processEnvironment__wrappee__highWaterSensor(); {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 144: Hoare triple {25239#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {25115#true} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 145: Hoare triple {25115#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 146: Hoare triple {25115#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {25115#true} is VALID [2022-02-20 18:12:14,278 INFO L290 TraceCheckUtils]: 147: Hoare triple {25115#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 148: Hoare triple {25115#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 149: Hoare triple {25115#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 150: Hoare triple {25115#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 151: Hoare triple {25115#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 152: Hoare triple {25115#true} assume { :end_inline_activatePump } true; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 153: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,279 INFO L284 TraceCheckUtils]: 154: Hoare quadruple {25115#true} {25116#false} #253#return; {25116#false} is VALID [2022-02-20 18:12:14,279 INFO L290 TraceCheckUtils]: 155: Hoare triple {25116#false} assume { :end_inline_processEnvironment } true; {25116#false} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 156: Hoare triple {25116#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {25116#false} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 157: Hoare triple {25116#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {25116#false} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 158: Hoare triple {25116#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {25116#false} is VALID [2022-02-20 18:12:14,280 INFO L272 TraceCheckUtils]: 159: Hoare triple {25116#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {25115#true} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 160: Hoare triple {25115#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {25115#true} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 161: Hoare triple {25115#true} assume true; {25115#true} is VALID [2022-02-20 18:12:14,280 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {25115#true} {25116#false} #255#return; {25116#false} is VALID [2022-02-20 18:12:14,280 INFO L290 TraceCheckUtils]: 163: Hoare triple {25116#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {25116#false} is VALID [2022-02-20 18:12:14,281 INFO L290 TraceCheckUtils]: 164: Hoare triple {25116#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {25116#false} is VALID [2022-02-20 18:12:14,281 INFO L290 TraceCheckUtils]: 165: Hoare triple {25116#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {25116#false} is VALID [2022-02-20 18:12:14,281 INFO L290 TraceCheckUtils]: 166: Hoare triple {25116#false} assume !false; {25116#false} is VALID [2022-02-20 18:12:14,281 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2022-02-20 18:12:14,281 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:14,282 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711345357] [2022-02-20 18:12:14,282 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711345357] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:14,282 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-20 18:12:14,282 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-20 18:12:14,282 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710156708] [2022-02-20 18:12:14,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:14,283 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) Word has length 167 [2022-02-20 18:12:14,283 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:14,283 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) [2022-02-20 18:12:14,334 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:14,335 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-20 18:12:14,335 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:14,335 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-20 18:12:14,335 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-02-20 18:12:14,336 INFO L87 Difference]: Start difference. First operand 591 states and 702 transitions. Second operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) [2022-02-20 18:12:16,460 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:16,460 INFO L93 Difference]: Finished difference Result 1686 states and 2029 transitions. [2022-02-20 18:12:16,460 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-02-20 18:12:16,461 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) Word has length 167 [2022-02-20 18:12:16,461 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:16,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) [2022-02-20 18:12:16,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 394 transitions. [2022-02-20 18:12:16,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) [2022-02-20 18:12:16,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 394 transitions. [2022-02-20 18:12:16,469 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 22 states and 394 transitions. [2022-02-20 18:12:16,749 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 394 edges. 394 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:16,803 INFO L225 Difference]: With dead ends: 1686 [2022-02-20 18:12:16,803 INFO L226 Difference]: Without dead ends: 1103 [2022-02-20 18:12:16,805 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 150 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=178, Invalid=578, Unknown=0, NotChecked=0, Total=756 [2022-02-20 18:12:16,806 INFO L933 BasicCegarLoop]: 207 mSDtfsCounter, 483 mSDsluCounter, 492 mSDsCounter, 0 mSdLazyCounter, 533 mSolverCounterSat, 171 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 487 SdHoareTripleChecker+Valid, 699 SdHoareTripleChecker+Invalid, 704 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 171 IncrementalHoareTripleChecker+Valid, 533 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:16,806 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [487 Valid, 699 Invalid, 704 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [171 Valid, 533 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-02-20 18:12:16,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1103 states. [2022-02-20 18:12:17,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1103 to 1101. [2022-02-20 18:12:17,208 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:17,210 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1103 states. Second operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) [2022-02-20 18:12:17,211 INFO L74 IsIncluded]: Start isIncluded. First operand 1103 states. Second operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) [2022-02-20 18:12:17,212 INFO L87 Difference]: Start difference. First operand 1103 states. Second operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) [2022-02-20 18:12:17,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:17,250 INFO L93 Difference]: Finished difference Result 1103 states and 1280 transitions. [2022-02-20 18:12:17,250 INFO L276 IsEmpty]: Start isEmpty. Operand 1103 states and 1280 transitions. [2022-02-20 18:12:17,252 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:17,252 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:17,254 INFO L74 IsIncluded]: Start isIncluded. First operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) Second operand 1103 states. [2022-02-20 18:12:17,255 INFO L87 Difference]: Start difference. First operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) Second operand 1103 states. [2022-02-20 18:12:17,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:17,300 INFO L93 Difference]: Finished difference Result 1103 states and 1280 transitions. [2022-02-20 18:12:17,300 INFO L276 IsEmpty]: Start isEmpty. Operand 1103 states and 1280 transitions. [2022-02-20 18:12:17,303 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:17,303 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:17,303 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:17,303 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:17,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1101 states, 824 states have (on average 1.145631067961165) internal successors, (944), 879 states have internal predecessors, (944), 146 states have call successors, (146), 124 states have call predecessors, (146), 130 states have return successors, (189), 133 states have call predecessors, (189), 146 states have call successors, (189) [2022-02-20 18:12:17,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1101 states to 1101 states and 1279 transitions. [2022-02-20 18:12:17,356 INFO L78 Accepts]: Start accepts. Automaton has 1101 states and 1279 transitions. Word has length 167 [2022-02-20 18:12:17,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:17,356 INFO L470 AbstractCegarLoop]: Abstraction has 1101 states and 1279 transitions. [2022-02-20 18:12:17,356 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 8.6) internal successors, (86), 7 states have internal predecessors, (86), 4 states have call successors, (11), 5 states have call predecessors, (11), 2 states have return successors, (11), 4 states have call predecessors, (11), 4 states have call successors, (11) [2022-02-20 18:12:17,356 INFO L276 IsEmpty]: Start isEmpty. Operand 1101 states and 1279 transitions. [2022-02-20 18:12:17,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 172 [2022-02-20 18:12:17,362 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:17,362 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:17,362 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-02-20 18:12:17,363 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:17,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:17,363 INFO L85 PathProgramCache]: Analyzing trace with hash -1382549873, now seen corresponding path program 1 times [2022-02-20 18:12:17,363 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:17,363 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [571142419] [2022-02-20 18:12:17,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:17,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:17,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:17,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,426 INFO L290 TraceCheckUtils]: 0: Hoare triple {31502#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31391#true} is VALID [2022-02-20 18:12:17,427 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,427 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31391#true} #257#return; {31391#true} is VALID [2022-02-20 18:12:17,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-20 18:12:17,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,433 INFO L290 TraceCheckUtils]: 0: Hoare triple {31503#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,434 INFO L290 TraceCheckUtils]: 1: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume true; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,434 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31399#(= ~methaneLevelCritical~0 1)} {31391#true} #259#return; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-02-20 18:12:17,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:17,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,449 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,449 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,450 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:17,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,457 INFO L290 TraceCheckUtils]: 0: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,457 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 4: Hoare triple {31391#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume { :end_inline_activatePump } true; {31391#true} is VALID [2022-02-20 18:12:17,458 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31391#true} {31391#true} #253#return; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L290 TraceCheckUtils]: 0: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L272 TraceCheckUtils]: 1: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,459 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,460 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume !(0 != ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,460 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,460 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume !(0 != ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,460 INFO L272 TraceCheckUtils]: 10: Hoare triple {31391#true} call processEnvironment__wrappee__highWaterSensor(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,460 INFO L290 TraceCheckUtils]: 11: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,460 INFO L290 TraceCheckUtils]: 12: Hoare triple {31391#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 13: Hoare triple {31391#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 14: Hoare triple {31391#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 15: Hoare triple {31391#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 16: Hoare triple {31391#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 17: Hoare triple {31391#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 18: Hoare triple {31391#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 19: Hoare triple {31391#true} assume { :end_inline_activatePump } true; {31391#true} is VALID [2022-02-20 18:12:17,461 INFO L290 TraceCheckUtils]: 20: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {31391#true} {31391#true} #253#return; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 22: Hoare triple {31391#true} assume { :end_inline_processEnvironment } true; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 23: Hoare triple {31391#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 24: Hoare triple {31391#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 25: Hoare triple {31391#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 26: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31391#true} is VALID [2022-02-20 18:12:17,462 INFO L290 TraceCheckUtils]: 27: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,463 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {31391#true} {31399#(= ~methaneLevelCritical~0 1)} #263#return; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-02-20 18:12:17,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:17,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,503 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,504 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,504 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:17,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:17,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,508 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {31391#true} {31391#true} #269#return; {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L290 TraceCheckUtils]: 0: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume !(0 == ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L272 TraceCheckUtils]: 2: Hoare triple {31391#true} call processEnvironment__wrappee__base(); {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31391#true} {31391#true} #269#return; {31391#true} is VALID [2022-02-20 18:12:17,508 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,509 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {31391#true} {31526#(not (= ~methaneLevelCritical~0 1))} #251#return; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,509 INFO L290 TraceCheckUtils]: 0: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,509 INFO L272 TraceCheckUtils]: 1: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,509 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,509 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,509 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume { :end_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,510 INFO L290 TraceCheckUtils]: 10: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,511 INFO L290 TraceCheckUtils]: 11: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31523#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:17,511 INFO L290 TraceCheckUtils]: 12: Hoare triple {31523#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31524#(or (<= 1 |timeShift_isMethaneAlarm_#res#1|) (not (= ~methaneLevelCritical~0 1)))} is VALID [2022-02-20 18:12:17,511 INFO L290 TraceCheckUtils]: 13: Hoare triple {31524#(or (<= 1 |timeShift_isMethaneAlarm_#res#1|) (not (= ~methaneLevelCritical~0 1)))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31525#(or (<= 1 |timeShift_processEnvironment_~tmp~1#1|) (not (= ~methaneLevelCritical~0 1)))} is VALID [2022-02-20 18:12:17,512 INFO L290 TraceCheckUtils]: 14: Hoare triple {31525#(or (<= 1 |timeShift_processEnvironment_~tmp~1#1|) (not (= ~methaneLevelCritical~0 1)))} assume !(0 != processEnvironment_~tmp~1#1); {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,512 INFO L272 TraceCheckUtils]: 15: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} call processEnvironment__wrappee__highWaterSensor(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,512 INFO L290 TraceCheckUtils]: 16: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,512 INFO L290 TraceCheckUtils]: 17: Hoare triple {31391#true} assume !(0 == ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,513 INFO L272 TraceCheckUtils]: 18: Hoare triple {31391#true} call processEnvironment__wrappee__base(); {31391#true} is VALID [2022-02-20 18:12:17,513 INFO L290 TraceCheckUtils]: 19: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,513 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {31391#true} {31391#true} #269#return; {31391#true} is VALID [2022-02-20 18:12:17,513 INFO L290 TraceCheckUtils]: 21: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,513 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {31391#true} {31526#(not (= ~methaneLevelCritical~0 1))} #251#return; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,513 INFO L290 TraceCheckUtils]: 23: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :end_inline_processEnvironment } true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,514 INFO L290 TraceCheckUtils]: 24: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,514 INFO L290 TraceCheckUtils]: 25: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,514 INFO L290 TraceCheckUtils]: 26: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,515 INFO L290 TraceCheckUtils]: 27: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,515 INFO L290 TraceCheckUtils]: 28: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,515 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {31526#(not (= ~methaneLevelCritical~0 1))} {31399#(= ~methaneLevelCritical~0 1)} #263#return; {31392#false} is VALID [2022-02-20 18:12:17,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-02-20 18:12:17,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:17,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,524 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,525 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,525 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:17,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {31391#true} is VALID [2022-02-20 18:12:17,527 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,527 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31391#true} #249#return; {31391#true} is VALID [2022-02-20 18:12:17,527 INFO L290 TraceCheckUtils]: 0: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L272 TraceCheckUtils]: 1: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,528 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume { :end_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 10: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 11: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 12: Hoare triple {31391#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 13: Hoare triple {31391#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31391#true} is VALID [2022-02-20 18:12:17,529 INFO L290 TraceCheckUtils]: 14: Hoare triple {31391#true} assume 0 != processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L272 TraceCheckUtils]: 15: Hoare triple {31391#true} call deactivatePump(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 16: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 17: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {31391#true} {31391#true} #249#return; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 19: Hoare triple {31391#true} assume { :end_inline_processEnvironment } true; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 20: Hoare triple {31391#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 21: Hoare triple {31391#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31391#true} is VALID [2022-02-20 18:12:17,530 INFO L290 TraceCheckUtils]: 22: Hoare triple {31391#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31391#true} is VALID [2022-02-20 18:12:17,531 INFO L290 TraceCheckUtils]: 23: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31391#true} is VALID [2022-02-20 18:12:17,531 INFO L290 TraceCheckUtils]: 24: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,531 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {31391#true} {31392#false} #263#return; {31392#false} is VALID [2022-02-20 18:12:17,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2022-02-20 18:12:17,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,533 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,533 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,534 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31392#false} #247#return; {31392#false} is VALID [2022-02-20 18:12:17,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2022-02-20 18:12:17,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,537 INFO L290 TraceCheckUtils]: 0: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 4: Hoare triple {31391#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31391#true} is VALID [2022-02-20 18:12:17,538 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume { :end_inline_activatePump } true; {31391#true} is VALID [2022-02-20 18:12:17,539 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,539 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {31391#true} {31392#false} #253#return; {31392#false} is VALID [2022-02-20 18:12:17,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2022-02-20 18:12:17,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,544 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,544 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,545 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {31391#true} {31392#false} #255#return; {31392#false} is VALID [2022-02-20 18:12:17,545 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 4: Hoare triple {31391#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {31391#true} is VALID [2022-02-20 18:12:17,546 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume !false; {31391#true} is VALID [2022-02-20 18:12:17,547 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume test_~splverifierCounter~0#1 < 4; {31391#true} is VALID [2022-02-20 18:12:17,547 INFO L290 TraceCheckUtils]: 10: Hoare triple {31391#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31391#true} is VALID [2022-02-20 18:12:17,547 INFO L290 TraceCheckUtils]: 11: Hoare triple {31391#true} assume 0 != test_~tmp~4#1; {31391#true} is VALID [2022-02-20 18:12:17,547 INFO L272 TraceCheckUtils]: 12: Hoare triple {31391#true} call waterRise(); {31502#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:17,547 INFO L290 TraceCheckUtils]: 13: Hoare triple {31502#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31391#true} is VALID [2022-02-20 18:12:17,547 INFO L290 TraceCheckUtils]: 14: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,548 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31391#true} {31391#true} #257#return; {31391#true} is VALID [2022-02-20 18:12:17,548 INFO L290 TraceCheckUtils]: 16: Hoare triple {31391#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31391#true} is VALID [2022-02-20 18:12:17,548 INFO L290 TraceCheckUtils]: 17: Hoare triple {31391#true} assume 0 != test_~tmp___0~1#1; {31391#true} is VALID [2022-02-20 18:12:17,548 INFO L272 TraceCheckUtils]: 18: Hoare triple {31391#true} call changeMethaneLevel(); {31503#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:17,548 INFO L290 TraceCheckUtils]: 19: Hoare triple {31503#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,549 INFO L290 TraceCheckUtils]: 20: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume true; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,549 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {31399#(= ~methaneLevelCritical~0 1)} {31391#true} #259#return; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,549 INFO L290 TraceCheckUtils]: 22: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,550 INFO L290 TraceCheckUtils]: 23: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume 0 != test_~tmp___2~0#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,550 INFO L272 TraceCheckUtils]: 24: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} call timeShift(); {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:17,550 INFO L290 TraceCheckUtils]: 25: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,550 INFO L272 TraceCheckUtils]: 26: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,550 INFO L290 TraceCheckUtils]: 27: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,550 INFO L290 TraceCheckUtils]: 28: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L290 TraceCheckUtils]: 30: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L290 TraceCheckUtils]: 31: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L290 TraceCheckUtils]: 32: Hoare triple {31391#true} assume !(0 != ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L290 TraceCheckUtils]: 33: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,551 INFO L290 TraceCheckUtils]: 34: Hoare triple {31391#true} assume !(0 != ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L272 TraceCheckUtils]: 35: Hoare triple {31391#true} call processEnvironment__wrappee__highWaterSensor(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 36: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 37: Hoare triple {31391#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 38: Hoare triple {31391#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 39: Hoare triple {31391#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 40: Hoare triple {31391#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 41: Hoare triple {31391#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31391#true} is VALID [2022-02-20 18:12:17,552 INFO L290 TraceCheckUtils]: 42: Hoare triple {31391#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 43: Hoare triple {31391#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 44: Hoare triple {31391#true} assume { :end_inline_activatePump } true; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 45: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {31391#true} {31391#true} #253#return; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 47: Hoare triple {31391#true} assume { :end_inline_processEnvironment } true; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 48: Hoare triple {31391#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 49: Hoare triple {31391#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31391#true} is VALID [2022-02-20 18:12:17,553 INFO L290 TraceCheckUtils]: 50: Hoare triple {31391#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31391#true} is VALID [2022-02-20 18:12:17,554 INFO L290 TraceCheckUtils]: 51: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31391#true} is VALID [2022-02-20 18:12:17,554 INFO L290 TraceCheckUtils]: 52: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,554 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {31391#true} {31399#(= ~methaneLevelCritical~0 1)} #263#return; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,554 INFO L290 TraceCheckUtils]: 54: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume !false; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,555 INFO L290 TraceCheckUtils]: 55: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume test_~splverifierCounter~0#1 < 4; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,555 INFO L290 TraceCheckUtils]: 56: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,555 INFO L290 TraceCheckUtils]: 57: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume !(0 != test_~tmp~4#1); {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,555 INFO L290 TraceCheckUtils]: 58: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,556 INFO L290 TraceCheckUtils]: 59: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume !(0 != test_~tmp___0~1#1); {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,556 INFO L290 TraceCheckUtils]: 60: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,556 INFO L290 TraceCheckUtils]: 61: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} assume 0 != test_~tmp___2~0#1; {31399#(= ~methaneLevelCritical~0 1)} is VALID [2022-02-20 18:12:17,557 INFO L272 TraceCheckUtils]: 62: Hoare triple {31399#(= ~methaneLevelCritical~0 1)} call timeShift(); {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:17,557 INFO L290 TraceCheckUtils]: 63: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L272 TraceCheckUtils]: 64: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L290 TraceCheckUtils]: 65: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L290 TraceCheckUtils]: 66: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L290 TraceCheckUtils]: 68: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,557 INFO L290 TraceCheckUtils]: 69: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,558 INFO L290 TraceCheckUtils]: 70: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,558 INFO L290 TraceCheckUtils]: 71: Hoare triple {31391#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31391#true} is VALID [2022-02-20 18:12:17,558 INFO L290 TraceCheckUtils]: 72: Hoare triple {31391#true} assume { :end_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,558 INFO L290 TraceCheckUtils]: 73: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,558 INFO L290 TraceCheckUtils]: 74: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31523#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:17,559 INFO L290 TraceCheckUtils]: 75: Hoare triple {31523#(= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31524#(or (<= 1 |timeShift_isMethaneAlarm_#res#1|) (not (= ~methaneLevelCritical~0 1)))} is VALID [2022-02-20 18:12:17,559 INFO L290 TraceCheckUtils]: 76: Hoare triple {31524#(or (<= 1 |timeShift_isMethaneAlarm_#res#1|) (not (= ~methaneLevelCritical~0 1)))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31525#(or (<= 1 |timeShift_processEnvironment_~tmp~1#1|) (not (= ~methaneLevelCritical~0 1)))} is VALID [2022-02-20 18:12:17,559 INFO L290 TraceCheckUtils]: 77: Hoare triple {31525#(or (<= 1 |timeShift_processEnvironment_~tmp~1#1|) (not (= ~methaneLevelCritical~0 1)))} assume !(0 != processEnvironment_~tmp~1#1); {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,560 INFO L272 TraceCheckUtils]: 78: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} call processEnvironment__wrappee__highWaterSensor(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,560 INFO L290 TraceCheckUtils]: 79: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,560 INFO L290 TraceCheckUtils]: 80: Hoare triple {31391#true} assume !(0 == ~pumpRunning~0); {31391#true} is VALID [2022-02-20 18:12:17,560 INFO L272 TraceCheckUtils]: 81: Hoare triple {31391#true} call processEnvironment__wrappee__base(); {31391#true} is VALID [2022-02-20 18:12:17,560 INFO L290 TraceCheckUtils]: 82: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,560 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {31391#true} {31391#true} #269#return; {31391#true} is VALID [2022-02-20 18:12:17,561 INFO L290 TraceCheckUtils]: 84: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,561 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {31391#true} {31526#(not (= ~methaneLevelCritical~0 1))} #251#return; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,561 INFO L290 TraceCheckUtils]: 86: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :end_inline_processEnvironment } true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,561 INFO L290 TraceCheckUtils]: 87: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,562 INFO L290 TraceCheckUtils]: 88: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,562 INFO L290 TraceCheckUtils]: 89: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,562 INFO L290 TraceCheckUtils]: 90: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,562 INFO L290 TraceCheckUtils]: 91: Hoare triple {31526#(not (= ~methaneLevelCritical~0 1))} assume true; {31526#(not (= ~methaneLevelCritical~0 1))} is VALID [2022-02-20 18:12:17,563 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {31526#(not (= ~methaneLevelCritical~0 1))} {31399#(= ~methaneLevelCritical~0 1)} #263#return; {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 93: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 94: Hoare triple {31392#false} assume test_~splverifierCounter~0#1 < 4; {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 95: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 96: Hoare triple {31392#false} assume !(0 != test_~tmp~4#1); {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 97: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31392#false} is VALID [2022-02-20 18:12:17,563 INFO L290 TraceCheckUtils]: 98: Hoare triple {31392#false} assume !(0 != test_~tmp___0~1#1); {31392#false} is VALID [2022-02-20 18:12:17,564 INFO L290 TraceCheckUtils]: 99: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31392#false} is VALID [2022-02-20 18:12:17,564 INFO L290 TraceCheckUtils]: 100: Hoare triple {31392#false} assume 0 != test_~tmp___2~0#1; {31392#false} is VALID [2022-02-20 18:12:17,564 INFO L272 TraceCheckUtils]: 101: Hoare triple {31392#false} call timeShift(); {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:17,564 INFO L290 TraceCheckUtils]: 102: Hoare triple {31504#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,564 INFO L272 TraceCheckUtils]: 103: Hoare triple {31391#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,564 INFO L290 TraceCheckUtils]: 104: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,564 INFO L290 TraceCheckUtils]: 105: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,564 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {31391#true} {31391#true} #247#return; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 107: Hoare triple {31391#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 108: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 109: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 110: Hoare triple {31391#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 111: Hoare triple {31391#true} assume { :end_inline_lowerWaterLevel } true; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 112: Hoare triple {31391#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 113: Hoare triple {31391#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31391#true} is VALID [2022-02-20 18:12:17,565 INFO L290 TraceCheckUtils]: 114: Hoare triple {31391#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31391#true} is VALID [2022-02-20 18:12:17,566 INFO L290 TraceCheckUtils]: 115: Hoare triple {31391#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31391#true} is VALID [2022-02-20 18:12:17,566 INFO L290 TraceCheckUtils]: 116: Hoare triple {31391#true} assume 0 != processEnvironment_~tmp~1#1; {31391#true} is VALID [2022-02-20 18:12:17,566 INFO L272 TraceCheckUtils]: 117: Hoare triple {31391#true} call deactivatePump(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,566 INFO L290 TraceCheckUtils]: 118: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {31391#true} is VALID [2022-02-20 18:12:17,566 INFO L290 TraceCheckUtils]: 119: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,566 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {31391#true} {31391#true} #249#return; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 121: Hoare triple {31391#true} assume { :end_inline_processEnvironment } true; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 122: Hoare triple {31391#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 123: Hoare triple {31391#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 124: Hoare triple {31391#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 125: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 126: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,567 INFO L284 TraceCheckUtils]: 127: Hoare quadruple {31391#true} {31392#false} #263#return; {31392#false} is VALID [2022-02-20 18:12:17,567 INFO L290 TraceCheckUtils]: 128: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 129: Hoare triple {31392#false} assume test_~splverifierCounter~0#1 < 4; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 130: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 131: Hoare triple {31392#false} assume !(0 != test_~tmp~4#1); {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 132: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 133: Hoare triple {31392#false} assume !(0 != test_~tmp___0~1#1); {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 134: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 135: Hoare triple {31392#false} assume 0 != test_~tmp___2~0#1; {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L272 TraceCheckUtils]: 136: Hoare triple {31392#false} call timeShift(); {31392#false} is VALID [2022-02-20 18:12:17,568 INFO L290 TraceCheckUtils]: 137: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:17,569 INFO L272 TraceCheckUtils]: 138: Hoare triple {31392#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 139: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 140: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,569 INFO L284 TraceCheckUtils]: 141: Hoare quadruple {31391#true} {31392#false} #247#return; {31392#false} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 142: Hoare triple {31392#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 143: Hoare triple {31392#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31392#false} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 144: Hoare triple {31392#false} assume !(0 != ~pumpRunning~0); {31392#false} is VALID [2022-02-20 18:12:17,569 INFO L290 TraceCheckUtils]: 145: Hoare triple {31392#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31392#false} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 146: Hoare triple {31392#false} assume !(0 != ~pumpRunning~0); {31392#false} is VALID [2022-02-20 18:12:17,570 INFO L272 TraceCheckUtils]: 147: Hoare triple {31392#false} call processEnvironment__wrappee__highWaterSensor(); {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 148: Hoare triple {31519#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 149: Hoare triple {31391#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 150: Hoare triple {31391#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 151: Hoare triple {31391#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 152: Hoare triple {31391#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 153: Hoare triple {31391#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31391#true} is VALID [2022-02-20 18:12:17,570 INFO L290 TraceCheckUtils]: 154: Hoare triple {31391#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31391#true} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 155: Hoare triple {31391#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31391#true} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 156: Hoare triple {31391#true} assume { :end_inline_activatePump } true; {31391#true} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 157: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,571 INFO L284 TraceCheckUtils]: 158: Hoare quadruple {31391#true} {31392#false} #253#return; {31392#false} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 159: Hoare triple {31392#false} assume { :end_inline_processEnvironment } true; {31392#false} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 160: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31392#false} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 161: Hoare triple {31392#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31392#false} is VALID [2022-02-20 18:12:17,571 INFO L290 TraceCheckUtils]: 162: Hoare triple {31392#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {31392#false} is VALID [2022-02-20 18:12:17,572 INFO L272 TraceCheckUtils]: 163: Hoare triple {31392#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {31391#true} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 164: Hoare triple {31391#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31391#true} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 165: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:17,572 INFO L284 TraceCheckUtils]: 166: Hoare quadruple {31391#true} {31392#false} #255#return; {31392#false} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 167: Hoare triple {31392#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {31392#false} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 168: Hoare triple {31392#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {31392#false} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 169: Hoare triple {31392#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {31392#false} is VALID [2022-02-20 18:12:17,572 INFO L290 TraceCheckUtils]: 170: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:17,574 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 83 proven. 10 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2022-02-20 18:12:17,574 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:17,574 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [571142419] [2022-02-20 18:12:17,574 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [571142419] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:17,574 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1655644419] [2022-02-20 18:12:17,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:17,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:17,574 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:17,576 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:17,577 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-02-20 18:12:17,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,692 INFO L263 TraceCheckSpWp]: Trace formula consists of 671 conjuncts, 7 conjunts are in the unsatisfiable core [2022-02-20 18:12:17,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:17,722 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:18,121 INFO L290 TraceCheckUtils]: 0: Hoare triple {31391#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {31391#true} is VALID [2022-02-20 18:12:18,121 INFO L290 TraceCheckUtils]: 1: Hoare triple {31391#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {31391#true} is VALID [2022-02-20 18:12:18,121 INFO L290 TraceCheckUtils]: 2: Hoare triple {31391#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {31391#true} is VALID [2022-02-20 18:12:18,121 INFO L290 TraceCheckUtils]: 3: Hoare triple {31391#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 4: Hoare triple {31391#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 5: Hoare triple {31391#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 6: Hoare triple {31391#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 7: Hoare triple {31391#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 8: Hoare triple {31391#true} assume !false; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 9: Hoare triple {31391#true} assume test_~splverifierCounter~0#1 < 4; {31391#true} is VALID [2022-02-20 18:12:18,122 INFO L290 TraceCheckUtils]: 10: Hoare triple {31391#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L290 TraceCheckUtils]: 11: Hoare triple {31391#true} assume 0 != test_~tmp~4#1; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L272 TraceCheckUtils]: 12: Hoare triple {31391#true} call waterRise(); {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L290 TraceCheckUtils]: 13: Hoare triple {31391#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L290 TraceCheckUtils]: 14: Hoare triple {31391#true} assume true; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {31391#true} {31391#true} #257#return; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L290 TraceCheckUtils]: 16: Hoare triple {31391#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31391#true} is VALID [2022-02-20 18:12:18,123 INFO L290 TraceCheckUtils]: 17: Hoare triple {31391#true} assume 0 != test_~tmp___0~1#1; {31391#true} is VALID [2022-02-20 18:12:18,124 INFO L272 TraceCheckUtils]: 18: Hoare triple {31391#true} call changeMethaneLevel(); {31391#true} is VALID [2022-02-20 18:12:18,124 INFO L290 TraceCheckUtils]: 19: Hoare triple {31391#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,124 INFO L290 TraceCheckUtils]: 20: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,125 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {31602#(<= 1 ~methaneLevelCritical~0)} {31391#true} #259#return; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,125 INFO L290 TraceCheckUtils]: 22: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,126 INFO L290 TraceCheckUtils]: 23: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,126 INFO L272 TraceCheckUtils]: 24: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,126 INFO L290 TraceCheckUtils]: 25: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,127 INFO L272 TraceCheckUtils]: 26: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,127 INFO L290 TraceCheckUtils]: 27: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,127 INFO L290 TraceCheckUtils]: 28: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,128 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {31602#(<= 1 ~methaneLevelCritical~0)} {31602#(<= 1 ~methaneLevelCritical~0)} #247#return; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,128 INFO L290 TraceCheckUtils]: 30: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,128 INFO L290 TraceCheckUtils]: 31: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,129 INFO L290 TraceCheckUtils]: 32: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,129 INFO L290 TraceCheckUtils]: 33: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,129 INFO L290 TraceCheckUtils]: 34: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,130 INFO L272 TraceCheckUtils]: 35: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} call processEnvironment__wrappee__highWaterSensor(); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,130 INFO L290 TraceCheckUtils]: 36: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} havoc ~tmp~0#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,130 INFO L290 TraceCheckUtils]: 37: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,131 INFO L290 TraceCheckUtils]: 38: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,131 INFO L290 TraceCheckUtils]: 39: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,131 INFO L290 TraceCheckUtils]: 40: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,132 INFO L290 TraceCheckUtils]: 41: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,132 INFO L290 TraceCheckUtils]: 42: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,132 INFO L290 TraceCheckUtils]: 43: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,132 INFO L290 TraceCheckUtils]: 44: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_activatePump } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,133 INFO L290 TraceCheckUtils]: 45: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,133 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {31602#(<= 1 ~methaneLevelCritical~0)} {31602#(<= 1 ~methaneLevelCritical~0)} #253#return; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,133 INFO L290 TraceCheckUtils]: 47: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_processEnvironment } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,134 INFO L290 TraceCheckUtils]: 48: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,134 INFO L290 TraceCheckUtils]: 49: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,134 INFO L290 TraceCheckUtils]: 50: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,135 INFO L290 TraceCheckUtils]: 51: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,135 INFO L290 TraceCheckUtils]: 52: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,135 INFO L284 TraceCheckUtils]: 53: Hoare quadruple {31602#(<= 1 ~methaneLevelCritical~0)} {31602#(<= 1 ~methaneLevelCritical~0)} #263#return; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,136 INFO L290 TraceCheckUtils]: 54: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !false; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,136 INFO L290 TraceCheckUtils]: 55: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0#1 < 4; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,136 INFO L290 TraceCheckUtils]: 56: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,137 INFO L290 TraceCheckUtils]: 57: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~4#1); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,137 INFO L290 TraceCheckUtils]: 58: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,137 INFO L290 TraceCheckUtils]: 59: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1#1); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,138 INFO L290 TraceCheckUtils]: 60: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,138 INFO L290 TraceCheckUtils]: 61: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,138 INFO L272 TraceCheckUtils]: 62: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} call timeShift(); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,139 INFO L290 TraceCheckUtils]: 63: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,139 INFO L272 TraceCheckUtils]: 64: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,139 INFO L290 TraceCheckUtils]: 65: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,140 INFO L290 TraceCheckUtils]: 66: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,140 INFO L284 TraceCheckUtils]: 67: Hoare quadruple {31602#(<= 1 ~methaneLevelCritical~0)} {31602#(<= 1 ~methaneLevelCritical~0)} #247#return; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,140 INFO L290 TraceCheckUtils]: 68: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,141 INFO L290 TraceCheckUtils]: 69: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,141 INFO L290 TraceCheckUtils]: 70: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,141 INFO L290 TraceCheckUtils]: 71: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,142 INFO L290 TraceCheckUtils]: 72: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume { :end_inline_lowerWaterLevel } true; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,142 INFO L290 TraceCheckUtils]: 73: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31602#(<= 1 ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:18,142 INFO L290 TraceCheckUtils]: 74: Hoare triple {31602#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31768#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))} is VALID [2022-02-20 18:12:18,143 INFO L290 TraceCheckUtils]: 75: Hoare triple {31768#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |timeShift_isMethaneLevelCritical_#res#1|))} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31772#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))} is VALID [2022-02-20 18:12:18,143 INFO L290 TraceCheckUtils]: 76: Hoare triple {31772#(and (<= 1 ~methaneLevelCritical~0) (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31776#(and (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|) (<= 1 ~methaneLevelCritical~0))} is VALID [2022-02-20 18:12:18,144 INFO L290 TraceCheckUtils]: 77: Hoare triple {31776#(and (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|) (<= 1 ~methaneLevelCritical~0))} assume !(0 != processEnvironment_~tmp~1#1); {31392#false} is VALID [2022-02-20 18:12:18,144 INFO L272 TraceCheckUtils]: 78: Hoare triple {31392#false} call processEnvironment__wrappee__highWaterSensor(); {31392#false} is VALID [2022-02-20 18:12:18,144 INFO L290 TraceCheckUtils]: 79: Hoare triple {31392#false} havoc ~tmp~0#1; {31392#false} is VALID [2022-02-20 18:12:18,144 INFO L290 TraceCheckUtils]: 80: Hoare triple {31392#false} assume !(0 == ~pumpRunning~0); {31392#false} is VALID [2022-02-20 18:12:18,144 INFO L272 TraceCheckUtils]: 81: Hoare triple {31392#false} call processEnvironment__wrappee__base(); {31392#false} is VALID [2022-02-20 18:12:18,144 INFO L290 TraceCheckUtils]: 82: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L284 TraceCheckUtils]: 83: Hoare quadruple {31392#false} {31392#false} #269#return; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L290 TraceCheckUtils]: 84: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L284 TraceCheckUtils]: 85: Hoare quadruple {31392#false} {31392#false} #251#return; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L290 TraceCheckUtils]: 86: Hoare triple {31392#false} assume { :end_inline_processEnvironment } true; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L290 TraceCheckUtils]: 87: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L290 TraceCheckUtils]: 88: Hoare triple {31392#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31392#false} is VALID [2022-02-20 18:12:18,145 INFO L290 TraceCheckUtils]: 89: Hoare triple {31392#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 90: Hoare triple {31392#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 91: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L284 TraceCheckUtils]: 92: Hoare quadruple {31392#false} {31602#(<= 1 ~methaneLevelCritical~0)} #263#return; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 93: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 94: Hoare triple {31392#false} assume test_~splverifierCounter~0#1 < 4; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 95: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31392#false} is VALID [2022-02-20 18:12:18,146 INFO L290 TraceCheckUtils]: 96: Hoare triple {31392#false} assume !(0 != test_~tmp~4#1); {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L290 TraceCheckUtils]: 97: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L290 TraceCheckUtils]: 98: Hoare triple {31392#false} assume !(0 != test_~tmp___0~1#1); {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L290 TraceCheckUtils]: 99: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L290 TraceCheckUtils]: 100: Hoare triple {31392#false} assume 0 != test_~tmp___2~0#1; {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L272 TraceCheckUtils]: 101: Hoare triple {31392#false} call timeShift(); {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L290 TraceCheckUtils]: 102: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:18,147 INFO L272 TraceCheckUtils]: 103: Hoare triple {31392#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 104: Hoare triple {31392#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 105: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {31392#false} {31392#false} #247#return; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 107: Hoare triple {31392#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 108: Hoare triple {31392#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 109: Hoare triple {31392#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {31392#false} is VALID [2022-02-20 18:12:18,148 INFO L290 TraceCheckUtils]: 110: Hoare triple {31392#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 111: Hoare triple {31392#false} assume { :end_inline_lowerWaterLevel } true; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 112: Hoare triple {31392#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 113: Hoare triple {31392#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 114: Hoare triple {31392#false} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 115: Hoare triple {31392#false} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L290 TraceCheckUtils]: 116: Hoare triple {31392#false} assume 0 != processEnvironment_~tmp~1#1; {31392#false} is VALID [2022-02-20 18:12:18,149 INFO L272 TraceCheckUtils]: 117: Hoare triple {31392#false} call deactivatePump(); {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 118: Hoare triple {31392#false} ~pumpRunning~0 := 0; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 119: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {31392#false} {31392#false} #249#return; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 121: Hoare triple {31392#false} assume { :end_inline_processEnvironment } true; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 122: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 123: Hoare triple {31392#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31392#false} is VALID [2022-02-20 18:12:18,150 INFO L290 TraceCheckUtils]: 124: Hoare triple {31392#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 125: Hoare triple {31392#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 126: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L284 TraceCheckUtils]: 127: Hoare quadruple {31392#false} {31392#false} #263#return; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 128: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 129: Hoare triple {31392#false} assume test_~splverifierCounter~0#1 < 4; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 130: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {31392#false} is VALID [2022-02-20 18:12:18,151 INFO L290 TraceCheckUtils]: 131: Hoare triple {31392#false} assume !(0 != test_~tmp~4#1); {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L290 TraceCheckUtils]: 132: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L290 TraceCheckUtils]: 133: Hoare triple {31392#false} assume !(0 != test_~tmp___0~1#1); {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L290 TraceCheckUtils]: 134: Hoare triple {31392#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L290 TraceCheckUtils]: 135: Hoare triple {31392#false} assume 0 != test_~tmp___2~0#1; {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L272 TraceCheckUtils]: 136: Hoare triple {31392#false} call timeShift(); {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L290 TraceCheckUtils]: 137: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:18,152 INFO L272 TraceCheckUtils]: 138: Hoare triple {31392#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 139: Hoare triple {31392#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 140: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L284 TraceCheckUtils]: 141: Hoare quadruple {31392#false} {31392#false} #247#return; {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 142: Hoare triple {31392#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 143: Hoare triple {31392#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 144: Hoare triple {31392#false} assume !(0 != ~pumpRunning~0); {31392#false} is VALID [2022-02-20 18:12:18,153 INFO L290 TraceCheckUtils]: 145: Hoare triple {31392#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L290 TraceCheckUtils]: 146: Hoare triple {31392#false} assume !(0 != ~pumpRunning~0); {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L272 TraceCheckUtils]: 147: Hoare triple {31392#false} call processEnvironment__wrappee__highWaterSensor(); {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L290 TraceCheckUtils]: 148: Hoare triple {31392#false} havoc ~tmp~0#1; {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L290 TraceCheckUtils]: 149: Hoare triple {31392#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L290 TraceCheckUtils]: 150: Hoare triple {31392#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {31392#false} is VALID [2022-02-20 18:12:18,154 INFO L290 TraceCheckUtils]: 151: Hoare triple {31392#false} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 152: Hoare triple {31392#false} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 153: Hoare triple {31392#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 154: Hoare triple {31392#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 155: Hoare triple {31392#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 156: Hoare triple {31392#false} assume { :end_inline_activatePump } true; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L290 TraceCheckUtils]: 157: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,155 INFO L284 TraceCheckUtils]: 158: Hoare quadruple {31392#false} {31392#false} #253#return; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 159: Hoare triple {31392#false} assume { :end_inline_processEnvironment } true; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 160: Hoare triple {31392#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 161: Hoare triple {31392#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 162: Hoare triple {31392#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L272 TraceCheckUtils]: 163: Hoare triple {31392#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 164: Hoare triple {31392#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {31392#false} is VALID [2022-02-20 18:12:18,156 INFO L290 TraceCheckUtils]: 165: Hoare triple {31392#false} assume true; {31392#false} is VALID [2022-02-20 18:12:18,157 INFO L284 TraceCheckUtils]: 166: Hoare quadruple {31392#false} {31392#false} #255#return; {31392#false} is VALID [2022-02-20 18:12:18,157 INFO L290 TraceCheckUtils]: 167: Hoare triple {31392#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {31392#false} is VALID [2022-02-20 18:12:18,157 INFO L290 TraceCheckUtils]: 168: Hoare triple {31392#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {31392#false} is VALID [2022-02-20 18:12:18,157 INFO L290 TraceCheckUtils]: 169: Hoare triple {31392#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {31392#false} is VALID [2022-02-20 18:12:18,157 INFO L290 TraceCheckUtils]: 170: Hoare triple {31392#false} assume !false; {31392#false} is VALID [2022-02-20 18:12:18,158 INFO L134 CoverageAnalysis]: Checked inductivity of 184 backedges. 127 proven. 0 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-02-20 18:12:18,158 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-02-20 18:12:18,158 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1655644419] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-20 18:12:18,158 INFO L191 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-02-20 18:12:18,158 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2022-02-20 18:12:18,159 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935157512] [2022-02-20 18:12:18,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-20 18:12:18,159 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 171 [2022-02-20 18:12:18,160 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:18,160 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:12:18,246 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 130 edges. 130 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:18,247 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-20 18:12:18,247 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:18,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-20 18:12:18,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=173, Unknown=0, NotChecked=0, Total=210 [2022-02-20 18:12:18,248 INFO L87 Difference]: Start difference. First operand 1101 states and 1279 transitions. Second operand has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:12:19,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:19,254 INFO L93 Difference]: Finished difference Result 2020 states and 2353 transitions. [2022-02-20 18:12:19,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-20 18:12:19,255 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 171 [2022-02-20 18:12:19,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:19,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:12:19,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 264 transitions. [2022-02-20 18:12:19,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:12:19,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 264 transitions. [2022-02-20 18:12:19,260 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 264 transitions. [2022-02-20 18:12:19,404 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:19,458 INFO L225 Difference]: With dead ends: 2020 [2022-02-20 18:12:19,458 INFO L226 Difference]: Without dead ends: 1023 [2022-02-20 18:12:19,460 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 209 GetRequests, 193 SyntacticMatches, 1 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=52, Invalid=220, Unknown=0, NotChecked=0, Total=272 [2022-02-20 18:12:19,461 INFO L933 BasicCegarLoop]: 162 mSDtfsCounter, 69 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 416 SdHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:19,461 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [69 Valid, 416 Invalid, 75 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-20 18:12:19,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1023 states. [2022-02-20 18:12:19,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1023 to 1008. [2022-02-20 18:12:19,979 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:19,986 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1023 states. Second operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) [2022-02-20 18:12:19,987 INFO L74 IsIncluded]: Start isIncluded. First operand 1023 states. Second operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) [2022-02-20 18:12:19,989 INFO L87 Difference]: Start difference. First operand 1023 states. Second operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) [2022-02-20 18:12:20,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:20,020 INFO L93 Difference]: Finished difference Result 1023 states and 1179 transitions. [2022-02-20 18:12:20,020 INFO L276 IsEmpty]: Start isEmpty. Operand 1023 states and 1179 transitions. [2022-02-20 18:12:20,022 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:20,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:20,024 INFO L74 IsIncluded]: Start isIncluded. First operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) Second operand 1023 states. [2022-02-20 18:12:20,025 INFO L87 Difference]: Start difference. First operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) Second operand 1023 states. [2022-02-20 18:12:20,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:20,075 INFO L93 Difference]: Finished difference Result 1023 states and 1179 transitions. [2022-02-20 18:12:20,075 INFO L276 IsEmpty]: Start isEmpty. Operand 1023 states and 1179 transitions. [2022-02-20 18:12:20,077 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:20,077 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:20,077 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:20,077 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:20,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1008 states, 760 states have (on average 1.138157894736842) internal successors, (865), 806 states have internal predecessors, (865), 131 states have call successors, (131), 113 states have call predecessors, (131), 116 states have return successors, (167), 119 states have call predecessors, (167), 131 states have call successors, (167) [2022-02-20 18:12:20,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1008 states to 1008 states and 1163 transitions. [2022-02-20 18:12:20,123 INFO L78 Accepts]: Start accepts. Automaton has 1008 states and 1163 transitions. Word has length 171 [2022-02-20 18:12:20,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:20,123 INFO L470 AbstractCegarLoop]: Abstraction has 1008 states and 1163 transitions. [2022-02-20 18:12:20,123 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.5) internal successors, (105), 6 states have internal predecessors, (105), 3 states have call successors, (12), 3 states have call predecessors, (12), 3 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) [2022-02-20 18:12:20,124 INFO L276 IsEmpty]: Start isEmpty. Operand 1008 states and 1163 transitions. [2022-02-20 18:12:20,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2022-02-20 18:12:20,126 INFO L506 BasicCegarLoop]: Found error trace [2022-02-20 18:12:20,127 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:20,145 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:20,343 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-02-20 18:12:20,344 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-02-20 18:12:20,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-20 18:12:20,344 INFO L85 PathProgramCache]: Analyzing trace with hash 1736531755, now seen corresponding path program 1 times [2022-02-20 18:12:20,344 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-20 18:12:20,344 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135891342] [2022-02-20 18:12:20,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:20,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-20 18:12:20,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-02-20 18:12:20,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,432 INFO L290 TraceCheckUtils]: 0: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38317#true} is VALID [2022-02-20 18:12:20,432 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,432 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #257#return; {38317#true} is VALID [2022-02-20 18:12:20,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-20 18:12:20,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:20,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,446 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,446 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,447 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-02-20 18:12:20,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,454 INFO L290 TraceCheckUtils]: 0: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,454 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,454 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,454 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 4: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,455 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {38317#true} {38317#true} #253#return; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 0: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L272 TraceCheckUtils]: 1: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,456 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume !(0 != ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,457 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,457 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume !(0 != ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,457 INFO L272 TraceCheckUtils]: 10: Hoare triple {38317#true} call processEnvironment__wrappee__highWaterSensor(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,457 INFO L290 TraceCheckUtils]: 11: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,457 INFO L290 TraceCheckUtils]: 12: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 13: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 14: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 15: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 16: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 17: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 18: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 19: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:20,458 INFO L290 TraceCheckUtils]: 20: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L284 TraceCheckUtils]: 21: Hoare quadruple {38317#true} {38317#true} #253#return; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 22: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 23: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 24: Hoare triple {38317#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 25: Hoare triple {38317#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 26: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L290 TraceCheckUtils]: 27: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,459 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {38317#true} {38317#true} #263#return; {38317#true} is VALID [2022-02-20 18:12:20,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-02-20 18:12:20,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:20,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,469 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,470 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:20,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-02-20 18:12:20,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,474 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,474 INFO L284 TraceCheckUtils]: 1: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:20,474 INFO L290 TraceCheckUtils]: 0: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,474 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume !(0 == ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L272 TraceCheckUtils]: 2: Hoare triple {38317#true} call processEnvironment__wrappee__base(); {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L284 TraceCheckUtils]: 6: Hoare quadruple {38317#true} {38317#true} #251#return; {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L290 TraceCheckUtils]: 0: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,475 INFO L272 TraceCheckUtils]: 1: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38317#true} is VALID [2022-02-20 18:12:20,476 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume { :end_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,477 INFO L290 TraceCheckUtils]: 10: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,477 INFO L290 TraceCheckUtils]: 11: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38317#true} is VALID [2022-02-20 18:12:20,477 INFO L290 TraceCheckUtils]: 12: Hoare triple {38317#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38317#true} is VALID [2022-02-20 18:12:20,477 INFO L290 TraceCheckUtils]: 13: Hoare triple {38317#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38317#true} is VALID [2022-02-20 18:12:20,477 INFO L290 TraceCheckUtils]: 14: Hoare triple {38317#true} assume !(0 != processEnvironment_~tmp~1#1); {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L272 TraceCheckUtils]: 15: Hoare triple {38317#true} call processEnvironment__wrappee__highWaterSensor(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,478 INFO L290 TraceCheckUtils]: 16: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L290 TraceCheckUtils]: 17: Hoare triple {38317#true} assume !(0 == ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L272 TraceCheckUtils]: 18: Hoare triple {38317#true} call processEnvironment__wrappee__base(); {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L290 TraceCheckUtils]: 19: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L284 TraceCheckUtils]: 20: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L290 TraceCheckUtils]: 21: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,478 INFO L284 TraceCheckUtils]: 22: Hoare quadruple {38317#true} {38317#true} #251#return; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 23: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 24: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 25: Hoare triple {38317#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 26: Hoare triple {38317#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 27: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L290 TraceCheckUtils]: 28: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,479 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {38317#true} {38317#true} #263#return; {38317#true} is VALID [2022-02-20 18:12:20,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-02-20 18:12:20,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,486 INFO L290 TraceCheckUtils]: 0: Hoare triple {38462#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,486 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,486 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #259#return; {38317#true} is VALID [2022-02-20 18:12:20,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-02-20 18:12:20,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-02-20 18:12:20,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,534 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,534 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,534 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-02-20 18:12:20,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,536 INFO L290 TraceCheckUtils]: 0: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38317#true} #249#return; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L290 TraceCheckUtils]: 0: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L272 TraceCheckUtils]: 1: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,537 INFO L284 TraceCheckUtils]: 4: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume { :end_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 10: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 11: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38317#true} is VALID [2022-02-20 18:12:20,538 INFO L290 TraceCheckUtils]: 12: Hoare triple {38317#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38317#true} is VALID [2022-02-20 18:12:20,539 INFO L290 TraceCheckUtils]: 13: Hoare triple {38317#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38317#true} is VALID [2022-02-20 18:12:20,539 INFO L290 TraceCheckUtils]: 14: Hoare triple {38317#true} assume 0 != processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,539 INFO L272 TraceCheckUtils]: 15: Hoare triple {38317#true} call deactivatePump(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,539 INFO L290 TraceCheckUtils]: 16: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {38317#true} is VALID [2022-02-20 18:12:20,539 INFO L290 TraceCheckUtils]: 17: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,539 INFO L284 TraceCheckUtils]: 18: Hoare quadruple {38317#true} {38317#true} #249#return; {38317#true} is VALID [2022-02-20 18:12:20,540 INFO L290 TraceCheckUtils]: 19: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,540 INFO L290 TraceCheckUtils]: 20: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38469#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:20,540 INFO L290 TraceCheckUtils]: 21: Hoare triple {38469#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38470#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:20,541 INFO L290 TraceCheckUtils]: 22: Hoare triple {38470#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,541 INFO L290 TraceCheckUtils]: 23: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,541 INFO L290 TraceCheckUtils]: 24: Hoare triple {38410#(= 2 ~waterLevel~0)} assume true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,542 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {38410#(= 2 ~waterLevel~0)} {38317#true} #263#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-02-20 18:12:20,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,549 INFO L290 TraceCheckUtils]: 0: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,549 INFO L290 TraceCheckUtils]: 1: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,549 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} {38410#(= 2 ~waterLevel~0)} #257#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2022-02-20 18:12:20,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,552 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,552 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,553 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38410#(= 2 ~waterLevel~0)} #247#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2022-02-20 18:12:20,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,558 INFO L290 TraceCheckUtils]: 0: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,558 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,558 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 4: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:20,559 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,560 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {38317#true} {38410#(= 2 ~waterLevel~0)} #253#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2022-02-20 18:12:20,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,562 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,562 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,562 INFO L284 TraceCheckUtils]: 2: Hoare quadruple {38317#true} {38318#false} #255#return; {38318#false} is VALID [2022-02-20 18:12:20,562 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {38317#true} is VALID [2022-02-20 18:12:20,562 INFO L290 TraceCheckUtils]: 1: Hoare triple {38317#true} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 2: Hoare triple {38317#true} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 3: Hoare triple {38317#true} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 4: Hoare triple {38317#true} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 5: Hoare triple {38317#true} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 6: Hoare triple {38317#true} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 7: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 8: Hoare triple {38317#true} assume !false; {38317#true} is VALID [2022-02-20 18:12:20,563 INFO L290 TraceCheckUtils]: 9: Hoare triple {38317#true} assume test_~splverifierCounter~0#1 < 4; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 10: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 11: Hoare triple {38317#true} assume 0 != test_~tmp~4#1; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L272 TraceCheckUtils]: 12: Hoare triple {38317#true} call waterRise(); {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 13: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 14: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {38317#true} {38317#true} #257#return; {38317#true} is VALID [2022-02-20 18:12:20,564 INFO L290 TraceCheckUtils]: 16: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38317#true} is VALID [2022-02-20 18:12:20,565 INFO L290 TraceCheckUtils]: 17: Hoare triple {38317#true} assume !(0 != test_~tmp___0~1#1); {38317#true} is VALID [2022-02-20 18:12:20,565 INFO L290 TraceCheckUtils]: 18: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38317#true} is VALID [2022-02-20 18:12:20,565 INFO L290 TraceCheckUtils]: 19: Hoare triple {38317#true} assume 0 != test_~tmp___2~0#1; {38317#true} is VALID [2022-02-20 18:12:20,568 INFO L272 TraceCheckUtils]: 20: Hoare triple {38317#true} call timeShift(); {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 21: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L272 TraceCheckUtils]: 22: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 23: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 24: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 26: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 27: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 28: Hoare triple {38317#true} assume !(0 != ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,569 INFO L290 TraceCheckUtils]: 29: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,570 INFO L290 TraceCheckUtils]: 30: Hoare triple {38317#true} assume !(0 != ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,570 INFO L272 TraceCheckUtils]: 31: Hoare triple {38317#true} call processEnvironment__wrappee__highWaterSensor(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,570 INFO L290 TraceCheckUtils]: 32: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,570 INFO L290 TraceCheckUtils]: 33: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,570 INFO L290 TraceCheckUtils]: 34: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,570 INFO L290 TraceCheckUtils]: 35: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 36: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 37: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 38: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 39: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 40: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 41: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {38317#true} {38317#true} #253#return; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 43: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,571 INFO L290 TraceCheckUtils]: 44: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 45: Hoare triple {38317#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 46: Hoare triple {38317#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 47: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 48: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {38317#true} {38317#true} #263#return; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 50: Hoare triple {38317#true} assume !false; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 51: Hoare triple {38317#true} assume test_~splverifierCounter~0#1 < 4; {38317#true} is VALID [2022-02-20 18:12:20,572 INFO L290 TraceCheckUtils]: 52: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38317#true} is VALID [2022-02-20 18:12:20,573 INFO L290 TraceCheckUtils]: 53: Hoare triple {38317#true} assume !(0 != test_~tmp~4#1); {38317#true} is VALID [2022-02-20 18:12:20,573 INFO L290 TraceCheckUtils]: 54: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38317#true} is VALID [2022-02-20 18:12:20,573 INFO L290 TraceCheckUtils]: 55: Hoare triple {38317#true} assume !(0 != test_~tmp___0~1#1); {38317#true} is VALID [2022-02-20 18:12:20,573 INFO L290 TraceCheckUtils]: 56: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38317#true} is VALID [2022-02-20 18:12:20,573 INFO L290 TraceCheckUtils]: 57: Hoare triple {38317#true} assume 0 != test_~tmp___2~0#1; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L272 TraceCheckUtils]: 58: Hoare triple {38317#true} call timeShift(); {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 59: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L272 TraceCheckUtils]: 60: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 61: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 62: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 64: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 65: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,574 INFO L290 TraceCheckUtils]: 66: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 67: Hoare triple {38317#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 68: Hoare triple {38317#true} assume { :end_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 69: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 70: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 71: Hoare triple {38317#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 72: Hoare triple {38317#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38317#true} is VALID [2022-02-20 18:12:20,575 INFO L290 TraceCheckUtils]: 73: Hoare triple {38317#true} assume !(0 != processEnvironment_~tmp~1#1); {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L272 TraceCheckUtils]: 74: Hoare triple {38317#true} call processEnvironment__wrappee__highWaterSensor(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,576 INFO L290 TraceCheckUtils]: 75: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L290 TraceCheckUtils]: 76: Hoare triple {38317#true} assume !(0 == ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L272 TraceCheckUtils]: 77: Hoare triple {38317#true} call processEnvironment__wrappee__base(); {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L290 TraceCheckUtils]: 78: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L290 TraceCheckUtils]: 80: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,576 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {38317#true} {38317#true} #251#return; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 82: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 83: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 84: Hoare triple {38317#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 85: Hoare triple {38317#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 86: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 87: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {38317#true} {38317#true} #263#return; {38317#true} is VALID [2022-02-20 18:12:20,577 INFO L290 TraceCheckUtils]: 89: Hoare triple {38317#true} assume !false; {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 90: Hoare triple {38317#true} assume test_~splverifierCounter~0#1 < 4; {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 91: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 92: Hoare triple {38317#true} assume !(0 != test_~tmp~4#1); {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 93: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 94: Hoare triple {38317#true} assume 0 != test_~tmp___0~1#1; {38317#true} is VALID [2022-02-20 18:12:20,578 INFO L272 TraceCheckUtils]: 95: Hoare triple {38317#true} call changeMethaneLevel(); {38462#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} is VALID [2022-02-20 18:12:20,578 INFO L290 TraceCheckUtils]: 96: Hoare triple {38462#(= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,579 INFO L290 TraceCheckUtils]: 97: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,579 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {38317#true} {38317#true} #259#return; {38317#true} is VALID [2022-02-20 18:12:20,579 INFO L290 TraceCheckUtils]: 99: Hoare triple {38317#true} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38317#true} is VALID [2022-02-20 18:12:20,579 INFO L290 TraceCheckUtils]: 100: Hoare triple {38317#true} assume 0 != test_~tmp___2~0#1; {38317#true} is VALID [2022-02-20 18:12:20,579 INFO L272 TraceCheckUtils]: 101: Hoare triple {38317#true} call timeShift(); {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} is VALID [2022-02-20 18:12:20,579 INFO L290 TraceCheckUtils]: 102: Hoare triple {38434#(and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|) (= |old(~waterLevel~0)| ~waterLevel~0))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L272 TraceCheckUtils]: 103: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 104: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 105: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 107: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 108: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 109: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,580 INFO L290 TraceCheckUtils]: 110: Hoare triple {38317#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 111: Hoare triple {38317#true} assume { :end_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 112: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 113: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 114: Hoare triple {38317#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 115: Hoare triple {38317#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38317#true} is VALID [2022-02-20 18:12:20,581 INFO L290 TraceCheckUtils]: 116: Hoare triple {38317#true} assume 0 != processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:20,583 INFO L272 TraceCheckUtils]: 117: Hoare triple {38317#true} call deactivatePump(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,583 INFO L290 TraceCheckUtils]: 118: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} ~pumpRunning~0 := 0; {38317#true} is VALID [2022-02-20 18:12:20,583 INFO L290 TraceCheckUtils]: 119: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,583 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {38317#true} {38317#true} #249#return; {38317#true} is VALID [2022-02-20 18:12:20,583 INFO L290 TraceCheckUtils]: 121: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:20,584 INFO L290 TraceCheckUtils]: 122: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38469#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} is VALID [2022-02-20 18:12:20,584 INFO L290 TraceCheckUtils]: 123: Hoare triple {38469#(or (= (+ (* (- 1) |timeShift_getWaterLevel_#res#1|) ~waterLevel~0) 0) (not (= (+ (- 2) |timeShift_getWaterLevel_#res#1|) 0)))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38470#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} is VALID [2022-02-20 18:12:20,585 INFO L290 TraceCheckUtils]: 124: Hoare triple {38470#(or (not (= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (and (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,585 INFO L290 TraceCheckUtils]: 125: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,585 INFO L290 TraceCheckUtils]: 126: Hoare triple {38410#(= 2 ~waterLevel~0)} assume true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,585 INFO L284 TraceCheckUtils]: 127: Hoare quadruple {38410#(= 2 ~waterLevel~0)} {38317#true} #263#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,586 INFO L290 TraceCheckUtils]: 128: Hoare triple {38410#(= 2 ~waterLevel~0)} assume !false; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,586 INFO L290 TraceCheckUtils]: 129: Hoare triple {38410#(= 2 ~waterLevel~0)} assume test_~splverifierCounter~0#1 < 4; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,586 INFO L290 TraceCheckUtils]: 130: Hoare triple {38410#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,587 INFO L290 TraceCheckUtils]: 131: Hoare triple {38410#(= 2 ~waterLevel~0)} assume 0 != test_~tmp~4#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,587 INFO L272 TraceCheckUtils]: 132: Hoare triple {38410#(= 2 ~waterLevel~0)} call waterRise(); {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,587 INFO L290 TraceCheckUtils]: 133: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume !(~waterLevel~0 < 2); {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,587 INFO L290 TraceCheckUtils]: 134: Hoare triple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} assume true; {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} is VALID [2022-02-20 18:12:20,588 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {38433#(= |old(~waterLevel~0)| ~waterLevel~0)} {38410#(= 2 ~waterLevel~0)} #257#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,588 INFO L290 TraceCheckUtils]: 136: Hoare triple {38410#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,588 INFO L290 TraceCheckUtils]: 137: Hoare triple {38410#(= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1#1); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,589 INFO L290 TraceCheckUtils]: 138: Hoare triple {38410#(= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,589 INFO L290 TraceCheckUtils]: 139: Hoare triple {38410#(= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,589 INFO L272 TraceCheckUtils]: 140: Hoare triple {38410#(= 2 ~waterLevel~0)} call timeShift(); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,589 INFO L290 TraceCheckUtils]: 141: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,590 INFO L272 TraceCheckUtils]: 142: Hoare triple {38410#(= 2 ~waterLevel~0)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,590 INFO L290 TraceCheckUtils]: 143: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,590 INFO L290 TraceCheckUtils]: 144: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,590 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {38317#true} {38410#(= 2 ~waterLevel~0)} #247#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 146: Hoare triple {38410#(= 2 ~waterLevel~0)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 147: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 148: Hoare triple {38410#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,591 INFO L290 TraceCheckUtils]: 149: Hoare triple {38410#(= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 150: Hoare triple {38410#(= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,592 INFO L272 TraceCheckUtils]: 151: Hoare triple {38410#(= 2 ~waterLevel~0)} call processEnvironment__wrappee__highWaterSensor(); {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 152: Hoare triple {38449#(= ~pumpRunning~0 |old(~pumpRunning~0)|)} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 153: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 154: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:20,592 INFO L290 TraceCheckUtils]: 155: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 156: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 157: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 158: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 159: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 160: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L290 TraceCheckUtils]: 161: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,593 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {38317#true} {38410#(= 2 ~waterLevel~0)} #253#return; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,594 INFO L290 TraceCheckUtils]: 163: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :end_inline_processEnvironment } true; {38410#(= 2 ~waterLevel~0)} is VALID [2022-02-20 18:12:20,594 INFO L290 TraceCheckUtils]: 164: Hoare triple {38410#(= 2 ~waterLevel~0)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38428#(= 2 |timeShift_getWaterLevel_#res#1|)} is VALID [2022-02-20 18:12:20,594 INFO L290 TraceCheckUtils]: 165: Hoare triple {38428#(= 2 |timeShift_getWaterLevel_#res#1|)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38429#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)} is VALID [2022-02-20 18:12:20,595 INFO L290 TraceCheckUtils]: 166: Hoare triple {38429#(= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {38318#false} is VALID [2022-02-20 18:12:20,595 INFO L272 TraceCheckUtils]: 167: Hoare triple {38318#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:20,595 INFO L290 TraceCheckUtils]: 168: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:20,595 INFO L290 TraceCheckUtils]: 169: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:20,595 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {38317#true} {38318#false} #255#return; {38318#false} is VALID [2022-02-20 18:12:20,595 INFO L290 TraceCheckUtils]: 171: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {38318#false} is VALID [2022-02-20 18:12:20,595 INFO L290 TraceCheckUtils]: 172: Hoare triple {38318#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {38318#false} is VALID [2022-02-20 18:12:20,596 INFO L290 TraceCheckUtils]: 173: Hoare triple {38318#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {38318#false} is VALID [2022-02-20 18:12:20,596 INFO L290 TraceCheckUtils]: 174: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:20,596 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 114 trivial. 0 not checked. [2022-02-20 18:12:20,596 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-20 18:12:20,596 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135891342] [2022-02-20 18:12:20,596 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1135891342] provided 0 perfect and 1 imperfect interpolant sequences [2022-02-20 18:12:20,597 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1898611019] [2022-02-20 18:12:20,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-20 18:12:20,597 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:20,597 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-20 18:12:20,598 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-02-20 18:12:20,599 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-02-20 18:12:20,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,708 INFO L263 TraceCheckSpWp]: Trace formula consists of 678 conjuncts, 13 conjunts are in the unsatisfiable core [2022-02-20 18:12:20,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-20 18:12:20,732 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-02-20 18:12:21,285 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,285 INFO L290 TraceCheckUtils]: 1: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,286 INFO L290 TraceCheckUtils]: 2: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,286 INFO L290 TraceCheckUtils]: 3: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,286 INFO L290 TraceCheckUtils]: 4: Hoare triple {38474#(<= ~waterLevel~0 1)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,287 INFO L290 TraceCheckUtils]: 5: Hoare triple {38474#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,287 INFO L290 TraceCheckUtils]: 6: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,287 INFO L290 TraceCheckUtils]: 7: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,287 INFO L290 TraceCheckUtils]: 8: Hoare triple {38474#(<= ~waterLevel~0 1)} assume !false; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,288 INFO L290 TraceCheckUtils]: 9: Hoare triple {38474#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,288 INFO L290 TraceCheckUtils]: 10: Hoare triple {38474#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,288 INFO L290 TraceCheckUtils]: 11: Hoare triple {38474#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:21,289 INFO L272 TraceCheckUtils]: 12: Hoare triple {38474#(<= ~waterLevel~0 1)} call waterRise(); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,289 INFO L290 TraceCheckUtils]: 13: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38515#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:21,289 INFO L290 TraceCheckUtils]: 14: Hoare triple {38515#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} assume true; {38515#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} is VALID [2022-02-20 18:12:21,290 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {38515#(<= ~waterLevel~0 (+ |old(~waterLevel~0)| 1))} {38474#(<= ~waterLevel~0 1)} #257#return; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,290 INFO L290 TraceCheckUtils]: 16: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,290 INFO L290 TraceCheckUtils]: 17: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,291 INFO L290 TraceCheckUtils]: 18: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,291 INFO L290 TraceCheckUtils]: 19: Hoare triple {38522#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,291 INFO L272 TraceCheckUtils]: 20: Hoare triple {38522#(<= ~waterLevel~0 2)} call timeShift(); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,292 INFO L290 TraceCheckUtils]: 21: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,292 INFO L272 TraceCheckUtils]: 22: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:21,292 INFO L290 TraceCheckUtils]: 23: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:21,292 INFO L290 TraceCheckUtils]: 24: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:21,292 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {38317#true} {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #247#return; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,293 INFO L290 TraceCheckUtils]: 26: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,293 INFO L290 TraceCheckUtils]: 27: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,293 INFO L290 TraceCheckUtils]: 28: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,293 INFO L290 TraceCheckUtils]: 29: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 30: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(0 != ~pumpRunning~0); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,294 INFO L272 TraceCheckUtils]: 31: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {38317#true} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 32: Hoare triple {38317#true} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 33: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 34: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 35: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:21,294 INFO L290 TraceCheckUtils]: 36: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L290 TraceCheckUtils]: 37: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L290 TraceCheckUtils]: 38: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L290 TraceCheckUtils]: 39: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L290 TraceCheckUtils]: 40: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L290 TraceCheckUtils]: 41: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:21,295 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {38317#true} {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #253#return; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,296 INFO L290 TraceCheckUtils]: 43: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,296 INFO L290 TraceCheckUtils]: 44: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,296 INFO L290 TraceCheckUtils]: 45: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,297 INFO L290 TraceCheckUtils]: 46: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,297 INFO L290 TraceCheckUtils]: 47: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,297 INFO L290 TraceCheckUtils]: 48: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,298 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} {38522#(<= ~waterLevel~0 2)} #263#return; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,298 INFO L290 TraceCheckUtils]: 50: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !false; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,298 INFO L290 TraceCheckUtils]: 51: Hoare triple {38522#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,298 INFO L290 TraceCheckUtils]: 52: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,299 INFO L290 TraceCheckUtils]: 53: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,299 INFO L290 TraceCheckUtils]: 54: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,299 INFO L290 TraceCheckUtils]: 55: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,299 INFO L290 TraceCheckUtils]: 56: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,300 INFO L290 TraceCheckUtils]: 57: Hoare triple {38522#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:21,300 INFO L272 TraceCheckUtils]: 58: Hoare triple {38522#(<= ~waterLevel~0 2)} call timeShift(); {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,300 INFO L290 TraceCheckUtils]: 59: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,300 INFO L272 TraceCheckUtils]: 60: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:21,300 INFO L290 TraceCheckUtils]: 61: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:21,301 INFO L290 TraceCheckUtils]: 62: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:21,301 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {38317#true} {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} #247#return; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,301 INFO L290 TraceCheckUtils]: 64: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,301 INFO L290 TraceCheckUtils]: 65: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,302 INFO L290 TraceCheckUtils]: 66: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,302 INFO L290 TraceCheckUtils]: 67: Hoare triple {38511#(<= ~waterLevel~0 |old(~waterLevel~0)|)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,302 INFO L290 TraceCheckUtils]: 68: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_lowerWaterLevel } true; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,303 INFO L290 TraceCheckUtils]: 69: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,303 INFO L290 TraceCheckUtils]: 70: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,303 INFO L290 TraceCheckUtils]: 71: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,304 INFO L290 TraceCheckUtils]: 72: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,304 INFO L290 TraceCheckUtils]: 73: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume !(0 != processEnvironment_~tmp~1#1); {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,304 INFO L272 TraceCheckUtils]: 74: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} call processEnvironment__wrappee__highWaterSensor(); {38317#true} is VALID [2022-02-20 18:12:21,304 INFO L290 TraceCheckUtils]: 75: Hoare triple {38317#true} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:21,304 INFO L290 TraceCheckUtils]: 76: Hoare triple {38317#true} assume !(0 == ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:21,304 INFO L272 TraceCheckUtils]: 77: Hoare triple {38317#true} call processEnvironment__wrappee__base(); {38317#true} is VALID [2022-02-20 18:12:21,304 INFO L290 TraceCheckUtils]: 78: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:21,305 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:21,305 INFO L290 TraceCheckUtils]: 80: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:21,305 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {38317#true} {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} #251#return; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,305 INFO L290 TraceCheckUtils]: 82: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :end_inline_processEnvironment } true; {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:21,306 INFO L290 TraceCheckUtils]: 83: Hoare triple {38679#(<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38728#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,306 INFO L290 TraceCheckUtils]: 84: Hoare triple {38728#(and (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38732#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| ~waterLevel~0))} is VALID [2022-02-20 18:12:21,306 INFO L290 TraceCheckUtils]: 85: Hoare triple {38732#(and (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| ~waterLevel~0))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,307 INFO L290 TraceCheckUtils]: 86: Hoare triple {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,307 INFO L290 TraceCheckUtils]: 87: Hoare triple {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} assume true; {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:21,307 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {38736#(and (<= 2 ~waterLevel~0) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))} {38522#(<= ~waterLevel~0 2)} #263#return; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 89: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 90: Hoare triple {38318#false} assume test_~splverifierCounter~0#1 < 4; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 91: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 92: Hoare triple {38318#false} assume !(0 != test_~tmp~4#1); {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 93: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 94: Hoare triple {38318#false} assume 0 != test_~tmp___0~1#1; {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L272 TraceCheckUtils]: 95: Hoare triple {38318#false} call changeMethaneLevel(); {38318#false} is VALID [2022-02-20 18:12:21,308 INFO L290 TraceCheckUtils]: 96: Hoare triple {38318#false} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L290 TraceCheckUtils]: 97: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {38318#false} {38318#false} #259#return; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L290 TraceCheckUtils]: 99: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L290 TraceCheckUtils]: 100: Hoare triple {38318#false} assume 0 != test_~tmp___2~0#1; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L272 TraceCheckUtils]: 101: Hoare triple {38318#false} call timeShift(); {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L290 TraceCheckUtils]: 102: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L272 TraceCheckUtils]: 103: Hoare triple {38318#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38318#false} is VALID [2022-02-20 18:12:21,309 INFO L290 TraceCheckUtils]: 104: Hoare triple {38318#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 105: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {38318#false} {38318#false} #247#return; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 107: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 108: Hoare triple {38318#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 109: Hoare triple {38318#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 110: Hoare triple {38318#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 111: Hoare triple {38318#false} assume { :end_inline_lowerWaterLevel } true; {38318#false} is VALID [2022-02-20 18:12:21,310 INFO L290 TraceCheckUtils]: 112: Hoare triple {38318#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 113: Hoare triple {38318#false} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 114: Hoare triple {38318#false} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 115: Hoare triple {38318#false} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 116: Hoare triple {38318#false} assume 0 != processEnvironment_~tmp~1#1; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L272 TraceCheckUtils]: 117: Hoare triple {38318#false} call deactivatePump(); {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 118: Hoare triple {38318#false} ~pumpRunning~0 := 0; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L290 TraceCheckUtils]: 119: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,311 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {38318#false} {38318#false} #249#return; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 121: Hoare triple {38318#false} assume { :end_inline_processEnvironment } true; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 122: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 123: Hoare triple {38318#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 124: Hoare triple {38318#false} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 125: Hoare triple {38318#false} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 126: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L284 TraceCheckUtils]: 127: Hoare quadruple {38318#false} {38318#false} #263#return; {38318#false} is VALID [2022-02-20 18:12:21,312 INFO L290 TraceCheckUtils]: 128: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 129: Hoare triple {38318#false} assume test_~splverifierCounter~0#1 < 4; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 130: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 131: Hoare triple {38318#false} assume 0 != test_~tmp~4#1; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L272 TraceCheckUtils]: 132: Hoare triple {38318#false} call waterRise(); {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 133: Hoare triple {38318#false} assume !(~waterLevel~0 < 2); {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 134: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {38318#false} {38318#false} #257#return; {38318#false} is VALID [2022-02-20 18:12:21,313 INFO L290 TraceCheckUtils]: 136: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 137: Hoare triple {38318#false} assume !(0 != test_~tmp___0~1#1); {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 138: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 139: Hoare triple {38318#false} assume 0 != test_~tmp___2~0#1; {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L272 TraceCheckUtils]: 140: Hoare triple {38318#false} call timeShift(); {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 141: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L272 TraceCheckUtils]: 142: Hoare triple {38318#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 143: Hoare triple {38318#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38318#false} is VALID [2022-02-20 18:12:21,314 INFO L290 TraceCheckUtils]: 144: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {38318#false} {38318#false} #247#return; {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 146: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 147: Hoare triple {38318#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 148: Hoare triple {38318#false} assume !(0 != ~pumpRunning~0); {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 149: Hoare triple {38318#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 150: Hoare triple {38318#false} assume !(0 != ~pumpRunning~0); {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L272 TraceCheckUtils]: 151: Hoare triple {38318#false} call processEnvironment__wrappee__highWaterSensor(); {38318#false} is VALID [2022-02-20 18:12:21,315 INFO L290 TraceCheckUtils]: 152: Hoare triple {38318#false} havoc ~tmp~0#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 153: Hoare triple {38318#false} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 154: Hoare triple {38318#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 155: Hoare triple {38318#false} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 156: Hoare triple {38318#false} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 157: Hoare triple {38318#false} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 158: Hoare triple {38318#false} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 159: Hoare triple {38318#false} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38318#false} is VALID [2022-02-20 18:12:21,316 INFO L290 TraceCheckUtils]: 160: Hoare triple {38318#false} assume { :end_inline_activatePump } true; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 161: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {38318#false} {38318#false} #253#return; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 163: Hoare triple {38318#false} assume { :end_inline_processEnvironment } true; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 164: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 165: Hoare triple {38318#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 166: Hoare triple {38318#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L272 TraceCheckUtils]: 167: Hoare triple {38318#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {38318#false} is VALID [2022-02-20 18:12:21,317 INFO L290 TraceCheckUtils]: 168: Hoare triple {38318#false} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L290 TraceCheckUtils]: 169: Hoare triple {38318#false} assume true; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {38318#false} {38318#false} #255#return; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L290 TraceCheckUtils]: 171: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L290 TraceCheckUtils]: 172: Hoare triple {38318#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L290 TraceCheckUtils]: 173: Hoare triple {38318#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {38318#false} is VALID [2022-02-20 18:12:21,318 INFO L290 TraceCheckUtils]: 174: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:21,319 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 138 proven. 4 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-02-20 18:12:21,319 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 174: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 173: Hoare triple {38318#false} assume 0 == ~switchedOnBeforeTS~0;assume { :begin_inline___automaton_fail } true; {38318#false} is VALID [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 172: Hoare triple {38318#false} assume 0 != __utac_acc__Specification5_spec__3_~tmp___0~2#1; {38318#false} is VALID [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 171: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret24#1 && __utac_acc__Specification5_spec__3_#t~ret24#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp___0~2#1 := __utac_acc__Specification5_spec__3_#t~ret24#1;havoc __utac_acc__Specification5_spec__3_#t~ret24#1; {38318#false} is VALID [2022-02-20 18:12:22,521 INFO L284 TraceCheckUtils]: 170: Hoare quadruple {38317#true} {38318#false} #255#return; {38318#false} is VALID [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 169: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,521 INFO L290 TraceCheckUtils]: 168: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L272 TraceCheckUtils]: 167: Hoare triple {38318#false} call __utac_acc__Specification5_spec__3_#t~ret24#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 166: Hoare triple {38318#false} assume 2 != __utac_acc__Specification5_spec__3_~tmp~5#1; {38318#false} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 165: Hoare triple {38318#false} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38318#false} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 164: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38318#false} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 163: Hoare triple {38318#false} assume { :end_inline_processEnvironment } true; {38318#false} is VALID [2022-02-20 18:12:22,522 INFO L284 TraceCheckUtils]: 162: Hoare quadruple {38317#true} {38318#false} #253#return; {38318#false} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 161: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 160: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 159: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 158: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:22,522 INFO L290 TraceCheckUtils]: 157: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 156: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 155: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 154: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 153: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 152: Hoare triple {38317#true} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L272 TraceCheckUtils]: 151: Hoare triple {38318#false} call processEnvironment__wrappee__highWaterSensor(); {38317#true} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 150: Hoare triple {38318#false} assume !(0 != ~pumpRunning~0); {38318#false} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 149: Hoare triple {38318#false} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38318#false} is VALID [2022-02-20 18:12:22,523 INFO L290 TraceCheckUtils]: 148: Hoare triple {38318#false} assume !(0 != ~pumpRunning~0); {38318#false} is VALID [2022-02-20 18:12:22,524 INFO L290 TraceCheckUtils]: 147: Hoare triple {38318#false} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38318#false} is VALID [2022-02-20 18:12:22,524 INFO L290 TraceCheckUtils]: 146: Hoare triple {38318#false} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:22,524 INFO L284 TraceCheckUtils]: 145: Hoare quadruple {38317#true} {38318#false} #247#return; {38318#false} is VALID [2022-02-20 18:12:22,524 INFO L290 TraceCheckUtils]: 144: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,524 INFO L290 TraceCheckUtils]: 143: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:22,524 INFO L272 TraceCheckUtils]: 142: Hoare triple {38318#false} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:22,524 INFO L290 TraceCheckUtils]: 141: Hoare triple {38318#false} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38318#false} is VALID [2022-02-20 18:12:22,524 INFO L272 TraceCheckUtils]: 140: Hoare triple {38318#false} call timeShift(); {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 139: Hoare triple {38318#false} assume 0 != test_~tmp___2~0#1; {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 138: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 137: Hoare triple {38318#false} assume !(0 != test_~tmp___0~1#1); {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 136: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L284 TraceCheckUtils]: 135: Hoare quadruple {38317#true} {38318#false} #257#return; {38318#false} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 134: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,525 INFO L290 TraceCheckUtils]: 133: Hoare triple {38317#true} assume !(~waterLevel~0 < 2); {38317#true} is VALID [2022-02-20 18:12:22,525 INFO L272 TraceCheckUtils]: 132: Hoare triple {38318#false} call waterRise(); {38317#true} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 131: Hoare triple {38318#false} assume 0 != test_~tmp~4#1; {38318#false} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 130: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38318#false} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 129: Hoare triple {38318#false} assume test_~splverifierCounter~0#1 < 4; {38318#false} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 128: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:22,526 INFO L284 TraceCheckUtils]: 127: Hoare quadruple {38317#true} {38318#false} #263#return; {38318#false} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 126: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 125: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {38317#true} is VALID [2022-02-20 18:12:22,526 INFO L290 TraceCheckUtils]: 124: Hoare triple {38317#true} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 123: Hoare triple {38317#true} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 122: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 121: Hoare triple {38317#true} assume { :end_inline_processEnvironment } true; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L284 TraceCheckUtils]: 120: Hoare quadruple {38317#true} {38317#true} #249#return; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 119: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 118: Hoare triple {38317#true} ~pumpRunning~0 := 0; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L272 TraceCheckUtils]: 117: Hoare triple {38317#true} call deactivatePump(); {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 116: Hoare triple {38317#true} assume 0 != processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:22,527 INFO L290 TraceCheckUtils]: 115: Hoare triple {38317#true} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 114: Hoare triple {38317#true} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 113: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 112: Hoare triple {38317#true} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 111: Hoare triple {38317#true} assume { :end_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 110: Hoare triple {38317#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 109: Hoare triple {38317#true} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 108: Hoare triple {38317#true} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {38317#true} is VALID [2022-02-20 18:12:22,528 INFO L290 TraceCheckUtils]: 107: Hoare triple {38317#true} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L284 TraceCheckUtils]: 106: Hoare quadruple {38317#true} {38317#true} #247#return; {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L290 TraceCheckUtils]: 105: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L290 TraceCheckUtils]: 104: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L272 TraceCheckUtils]: 103: Hoare triple {38317#true} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L290 TraceCheckUtils]: 102: Hoare triple {38317#true} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L272 TraceCheckUtils]: 101: Hoare triple {38318#false} call timeShift(); {38317#true} is VALID [2022-02-20 18:12:22,529 INFO L290 TraceCheckUtils]: 100: Hoare triple {38318#false} assume 0 != test_~tmp___2~0#1; {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 99: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L284 TraceCheckUtils]: 98: Hoare quadruple {38317#true} {38318#false} #259#return; {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 97: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 96: Hoare triple {38317#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38317#true} is VALID [2022-02-20 18:12:22,530 INFO L272 TraceCheckUtils]: 95: Hoare triple {38318#false} call changeMethaneLevel(); {38317#true} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 94: Hoare triple {38318#false} assume 0 != test_~tmp___0~1#1; {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 93: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 92: Hoare triple {38318#false} assume !(0 != test_~tmp~4#1); {38318#false} is VALID [2022-02-20 18:12:22,530 INFO L290 TraceCheckUtils]: 91: Hoare triple {38318#false} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38318#false} is VALID [2022-02-20 18:12:22,531 INFO L290 TraceCheckUtils]: 90: Hoare triple {38318#false} assume test_~splverifierCounter~0#1 < 4; {38318#false} is VALID [2022-02-20 18:12:22,531 INFO L290 TraceCheckUtils]: 89: Hoare triple {38318#false} assume !false; {38318#false} is VALID [2022-02-20 18:12:22,531 INFO L284 TraceCheckUtils]: 88: Hoare quadruple {39265#(< 2 |old(~waterLevel~0)|)} {38522#(<= ~waterLevel~0 2)} #263#return; {38318#false} is VALID [2022-02-20 18:12:22,532 INFO L290 TraceCheckUtils]: 87: Hoare triple {39265#(< 2 |old(~waterLevel~0)|)} assume true; {39265#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:22,532 INFO L290 TraceCheckUtils]: 86: Hoare triple {39265#(< 2 |old(~waterLevel~0)|)} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {39265#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:22,533 INFO L290 TraceCheckUtils]: 85: Hoare triple {39275#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1|)) (< 2 |old(~waterLevel~0)|))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {39265#(< 2 |old(~waterLevel~0)|)} is VALID [2022-02-20 18:12:22,533 INFO L290 TraceCheckUtils]: 84: Hoare triple {39279#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {39275#(or (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1|)) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,534 INFO L290 TraceCheckUtils]: 83: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {39279#(or (< |timeShift_getWaterLevel_#res#1| 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,534 INFO L290 TraceCheckUtils]: 82: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_processEnvironment } true; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,534 INFO L284 TraceCheckUtils]: 81: Hoare quadruple {38317#true} {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} #251#return; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,535 INFO L290 TraceCheckUtils]: 80: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L284 TraceCheckUtils]: 79: Hoare quadruple {38317#true} {38317#true} #269#return; {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L290 TraceCheckUtils]: 78: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L272 TraceCheckUtils]: 77: Hoare triple {38317#true} call processEnvironment__wrappee__base(); {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L290 TraceCheckUtils]: 76: Hoare triple {38317#true} assume !(0 == ~pumpRunning~0); {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L290 TraceCheckUtils]: 75: Hoare triple {38317#true} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:22,535 INFO L272 TraceCheckUtils]: 74: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} call processEnvironment__wrappee__highWaterSensor(); {38317#true} is VALID [2022-02-20 18:12:22,536 INFO L290 TraceCheckUtils]: 73: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume !(0 != processEnvironment_~tmp~1#1); {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,536 INFO L290 TraceCheckUtils]: 72: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} processEnvironment_#t~ret6#1 := isMethaneAlarm_#res#1;assume { :end_inline_isMethaneAlarm } true;assume -2147483648 <= processEnvironment_#t~ret6#1 && processEnvironment_#t~ret6#1 <= 2147483647;processEnvironment_~tmp~1#1 := processEnvironment_#t~ret6#1;havoc processEnvironment_#t~ret6#1; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,536 INFO L290 TraceCheckUtils]: 71: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} isMethaneAlarm_#t~ret7#1 := isMethaneLevelCritical_#res#1;assume { :end_inline_isMethaneLevelCritical } true;assume -2147483648 <= isMethaneAlarm_#t~ret7#1 && isMethaneAlarm_#t~ret7#1 <= 2147483647;isMethaneAlarm_~retValue_acc~2#1 := isMethaneAlarm_#t~ret7#1;havoc isMethaneAlarm_#t~ret7#1;isMethaneAlarm_#res#1 := isMethaneAlarm_~retValue_acc~2#1; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,536 INFO L290 TraceCheckUtils]: 70: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~pumpRunning~0;assume { :begin_inline_isMethaneAlarm } true;havoc isMethaneAlarm_#res#1;havoc isMethaneAlarm_#t~ret7#1, isMethaneAlarm_~retValue_acc~2#1;havoc isMethaneAlarm_~retValue_acc~2#1;assume { :begin_inline_isMethaneLevelCritical } true;havoc isMethaneLevelCritical_#res#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;havoc isMethaneLevelCritical_~retValue_acc~9#1;isMethaneLevelCritical_~retValue_acc~9#1 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res#1 := isMethaneLevelCritical_~retValue_acc~9#1; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,537 INFO L290 TraceCheckUtils]: 69: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,537 INFO L290 TraceCheckUtils]: 68: Hoare triple {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} assume { :end_inline_lowerWaterLevel } true; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,537 INFO L290 TraceCheckUtils]: 67: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {39283#(or (< ~waterLevel~0 2) (< 2 |old(~waterLevel~0)|))} is VALID [2022-02-20 18:12:22,538 INFO L290 TraceCheckUtils]: 66: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~pumpRunning~0;assume { :begin_inline_lowerWaterLevel } true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,538 INFO L290 TraceCheckUtils]: 65: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,538 INFO L290 TraceCheckUtils]: 64: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,539 INFO L284 TraceCheckUtils]: 63: Hoare quadruple {38317#true} {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #247#return; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,539 INFO L290 TraceCheckUtils]: 62: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,539 INFO L290 TraceCheckUtils]: 61: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:22,539 INFO L272 TraceCheckUtils]: 60: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:22,539 INFO L290 TraceCheckUtils]: 59: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,540 INFO L272 TraceCheckUtils]: 58: Hoare triple {38522#(<= ~waterLevel~0 2)} call timeShift(); {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,540 INFO L290 TraceCheckUtils]: 57: Hoare triple {38522#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,540 INFO L290 TraceCheckUtils]: 56: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,541 INFO L290 TraceCheckUtils]: 55: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,541 INFO L290 TraceCheckUtils]: 54: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,541 INFO L290 TraceCheckUtils]: 53: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,541 INFO L290 TraceCheckUtils]: 52: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,542 INFO L290 TraceCheckUtils]: 51: Hoare triple {38522#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0#1 < 4; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,542 INFO L290 TraceCheckUtils]: 50: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !false; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,542 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} {38522#(<= ~waterLevel~0 2)} #263#return; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,543 INFO L290 TraceCheckUtils]: 48: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,543 INFO L290 TraceCheckUtils]: 47: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__3 } true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,543 INFO L290 TraceCheckUtils]: 46: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(2 != __utac_acc__Specification5_spec__3_~tmp~5#1); {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,544 INFO L290 TraceCheckUtils]: 45: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} __utac_acc__Specification5_spec__3_#t~ret23#1 := getWaterLevel_#res#1;assume { :end_inline_getWaterLevel } true;assume -2147483648 <= __utac_acc__Specification5_spec__3_#t~ret23#1 && __utac_acc__Specification5_spec__3_#t~ret23#1 <= 2147483647;__utac_acc__Specification5_spec__3_~tmp~5#1 := __utac_acc__Specification5_spec__3_#t~ret23#1;havoc __utac_acc__Specification5_spec__3_#t~ret23#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,544 INFO L290 TraceCheckUtils]: 44: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__3 } true;havoc __utac_acc__Specification5_spec__3_#t~ret23#1, __utac_acc__Specification5_spec__3_#t~ret24#1, __utac_acc__Specification5_spec__3_~tmp~5#1, __utac_acc__Specification5_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification5_spec__3_~tmp~5#1;havoc __utac_acc__Specification5_spec__3_~tmp___0~2#1;assume { :begin_inline_getWaterLevel } true;havoc getWaterLevel_#res#1;havoc getWaterLevel_~retValue_acc~10#1;havoc getWaterLevel_~retValue_acc~10#1;getWaterLevel_~retValue_acc~10#1 := ~waterLevel~0;getWaterLevel_#res#1 := getWaterLevel_~retValue_acc~10#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,544 INFO L290 TraceCheckUtils]: 43: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline_processEnvironment } true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,545 INFO L284 TraceCheckUtils]: 42: Hoare quadruple {38317#true} {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #253#return; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 41: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 40: Hoare triple {38317#true} assume { :end_inline_activatePump } true; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 39: Hoare triple {38317#true} assume 0 != ~tmp~0#1;assume { :begin_inline_activatePump } true;~pumpRunning~0 := 1; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 38: Hoare triple {38317#true} #t~ret5#1 := isHighWaterLevel_#res#1;assume { :end_inline_isHighWaterLevel } true;assume -2147483648 <= #t~ret5#1 && #t~ret5#1 <= 2147483647;~tmp~0#1 := #t~ret5#1;havoc #t~ret5#1; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 37: Hoare triple {38317#true} isHighWaterLevel_~retValue_acc~4#1 := isHighWaterLevel_~tmp___0~0#1;isHighWaterLevel_#res#1 := isHighWaterLevel_~retValue_acc~4#1; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 36: Hoare triple {38317#true} assume !(0 != isHighWaterLevel_~tmp~2#1);isHighWaterLevel_~tmp___0~0#1 := 1; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 35: Hoare triple {38317#true} isHighWaterLevel_#t~ret16#1 := isHighWaterSensorDry_#res#1;assume { :end_inline_isHighWaterSensorDry } true;assume -2147483648 <= isHighWaterLevel_#t~ret16#1 && isHighWaterLevel_#t~ret16#1 <= 2147483647;isHighWaterLevel_~tmp~2#1 := isHighWaterLevel_#t~ret16#1;havoc isHighWaterLevel_#t~ret16#1; {38317#true} is VALID [2022-02-20 18:12:22,545 INFO L290 TraceCheckUtils]: 34: Hoare triple {38317#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11#1 := 0;isHighWaterSensorDry_#res#1 := isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:22,546 INFO L290 TraceCheckUtils]: 33: Hoare triple {38317#true} assume 0 == ~pumpRunning~0;assume { :begin_inline_isHighWaterLevel } true;havoc isHighWaterLevel_#res#1;havoc isHighWaterLevel_#t~ret16#1, isHighWaterLevel_~retValue_acc~4#1, isHighWaterLevel_~tmp~2#1, isHighWaterLevel_~tmp___0~0#1;havoc isHighWaterLevel_~retValue_acc~4#1;havoc isHighWaterLevel_~tmp~2#1;havoc isHighWaterLevel_~tmp___0~0#1;assume { :begin_inline_isHighWaterSensorDry } true;havoc isHighWaterSensorDry_#res#1;havoc isHighWaterSensorDry_~retValue_acc~11#1;havoc isHighWaterSensorDry_~retValue_acc~11#1; {38317#true} is VALID [2022-02-20 18:12:22,546 INFO L290 TraceCheckUtils]: 32: Hoare triple {38317#true} havoc ~tmp~0#1; {38317#true} is VALID [2022-02-20 18:12:22,546 INFO L272 TraceCheckUtils]: 31: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call processEnvironment__wrappee__highWaterSensor(); {38317#true} is VALID [2022-02-20 18:12:22,546 INFO L290 TraceCheckUtils]: 30: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,546 INFO L290 TraceCheckUtils]: 29: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume 0 != ~systemActive~0;assume { :begin_inline_processEnvironment } true;havoc processEnvironment_#t~ret6#1, processEnvironment_~tmp~1#1;havoc processEnvironment_~tmp~1#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,547 INFO L290 TraceCheckUtils]: 28: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume !(0 != ~pumpRunning~0); {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,547 INFO L290 TraceCheckUtils]: 27: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :end_inline___utac_acc__Specification5_spec__2 } true; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,547 INFO L290 TraceCheckUtils]: 26: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume -2147483648 <= __utac_acc__Specification5_spec__2_#t~ret22#1 && __utac_acc__Specification5_spec__2_#t~ret22#1 <= 2147483647;~switchedOnBeforeTS~0 := __utac_acc__Specification5_spec__2_#t~ret22#1;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,548 INFO L284 TraceCheckUtils]: 25: Hoare quadruple {38317#true} {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} #247#return; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,548 INFO L290 TraceCheckUtils]: 24: Hoare triple {38317#true} assume true; {38317#true} is VALID [2022-02-20 18:12:22,548 INFO L290 TraceCheckUtils]: 23: Hoare triple {38317#true} havoc ~retValue_acc~3;~retValue_acc~3 := ~pumpRunning~0;#res := ~retValue_acc~3; {38317#true} is VALID [2022-02-20 18:12:22,548 INFO L272 TraceCheckUtils]: 22: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} call __utac_acc__Specification5_spec__2_#t~ret22#1 := isPumpRunning(); {38317#true} is VALID [2022-02-20 18:12:22,549 INFO L290 TraceCheckUtils]: 21: Hoare triple {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} assume { :begin_inline___utac_acc__Specification5_spec__2 } true;havoc __utac_acc__Specification5_spec__2_#t~ret22#1; {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,549 INFO L272 TraceCheckUtils]: 20: Hoare triple {38522#(<= ~waterLevel~0 2)} call timeShift(); {39332#(or (< 2 |old(~waterLevel~0)|) (< ~waterLevel~0 3))} is VALID [2022-02-20 18:12:22,549 INFO L290 TraceCheckUtils]: 19: Hoare triple {38522#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,549 INFO L290 TraceCheckUtils]: 18: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet20#1 && test_#t~nondet20#1 <= 2147483647;test_~tmp___2~0#1 := test_#t~nondet20#1;havoc test_#t~nondet20#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,550 INFO L290 TraceCheckUtils]: 17: Hoare triple {38522#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1#1); {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,550 INFO L290 TraceCheckUtils]: 16: Hoare triple {38522#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet19#1 && test_#t~nondet19#1 <= 2147483647;test_~tmp___0~1#1 := test_#t~nondet19#1;havoc test_#t~nondet19#1; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,550 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {39489#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} {38474#(<= ~waterLevel~0 1)} #257#return; {38522#(<= ~waterLevel~0 2)} is VALID [2022-02-20 18:12:22,551 INFO L290 TraceCheckUtils]: 14: Hoare triple {39489#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} assume true; {39489#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:22,551 INFO L290 TraceCheckUtils]: 13: Hoare triple {39496#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {39489#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 2))} is VALID [2022-02-20 18:12:22,551 INFO L272 TraceCheckUtils]: 12: Hoare triple {38474#(<= ~waterLevel~0 1)} call waterRise(); {39496#(or (< 1 |old(~waterLevel~0)|) (<= ~waterLevel~0 1))} is VALID [2022-02-20 18:12:22,552 INFO L290 TraceCheckUtils]: 11: Hoare triple {38474#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~4#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,552 INFO L290 TraceCheckUtils]: 10: Hoare triple {38474#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet18#1 && test_#t~nondet18#1 <= 2147483647;test_~tmp~4#1 := test_#t~nondet18#1;havoc test_#t~nondet18#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,552 INFO L290 TraceCheckUtils]: 9: Hoare triple {38474#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0#1 < 4; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,552 INFO L290 TraceCheckUtils]: 8: Hoare triple {38474#(<= ~waterLevel~0 1)} assume !false; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,553 INFO L290 TraceCheckUtils]: 7: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline___utac_acc__Specification5_spec__1 } true;assume { :begin_inline_test } true;havoc test_#t~nondet18#1, test_#t~nondet19#1, test_#t~nondet20#1, test_#t~nondet21#1, test_~splverifierCounter~0#1, test_~tmp~4#1, test_~tmp___0~1#1, test_~tmp___1~0#1, test_~tmp___2~0#1;havoc test_~splverifierCounter~0#1;havoc test_~tmp~4#1;havoc test_~tmp___0~1#1;havoc test_~tmp___1~0#1;havoc test_~tmp___2~0#1;test_~splverifierCounter~0#1 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,553 INFO L290 TraceCheckUtils]: 6: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification5_spec__1 } true;~switchedOnBeforeTS~0 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,553 INFO L290 TraceCheckUtils]: 5: Hoare triple {38474#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~3#1;assume { :begin_inline_setup } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,554 INFO L290 TraceCheckUtils]: 4: Hoare triple {38474#(<= ~waterLevel~0 1)} main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;assume -2147483648 <= main_#t~ret17#1 && main_#t~ret17#1 <= 2147483647;main_~tmp~3#1 := main_#t~ret17#1;havoc main_#t~ret17#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,554 INFO L290 TraceCheckUtils]: 3: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,554 INFO L290 TraceCheckUtils]: 2: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,554 INFO L290 TraceCheckUtils]: 1: Hoare triple {38474#(<= ~waterLevel~0 1)} assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~5#1, main_~tmp~3#1;havoc main_~retValue_acc~5#1;havoc main_~tmp~3#1;assume { :begin_inline_select_helpers } true; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,556 INFO L290 TraceCheckUtils]: 0: Hoare triple {38317#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(13, 4);call #Ultimate.allocInit(3, 5);call write~init~int(79, 5, 0, 1);call write~init~int(110, 5, 1, 1);call write~init~int(0, 5, 2, 1);call #Ultimate.allocInit(4, 6);call write~init~int(79, 6, 0, 1);call write~init~int(102, 6, 1, 1);call write~init~int(102, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(7, 7);call write~init~int(44, 7, 0, 1);call write~init~int(80, 7, 1, 1);call write~init~int(117, 7, 2, 1);call write~init~int(109, 7, 3, 1);call write~init~int(112, 7, 4, 1);call write~init~int(58, 7, 5, 1);call write~init~int(0, 7, 6, 1);call #Ultimate.allocInit(3, 8);call write~init~int(79, 8, 0, 1);call write~init~int(110, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(4, 9);call write~init~int(79, 9, 0, 1);call write~init~int(102, 9, 1, 1);call write~init~int(102, 9, 2, 1);call write~init~int(0, 9, 3, 1);call #Ultimate.allocInit(3, 10);call write~init~int(41, 10, 0, 1);call write~init~int(32, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(2, 11);call write~init~int(10, 11, 0, 1);call write~init~int(0, 11, 1, 1);call #Ultimate.allocInit(30, 12);call #Ultimate.allocInit(9, 13);call #Ultimate.allocInit(21, 14);call #Ultimate.allocInit(30, 15);call #Ultimate.allocInit(9, 16);call #Ultimate.allocInit(21, 17);call #Ultimate.allocInit(30, 18);call #Ultimate.allocInit(9, 19);call #Ultimate.allocInit(25, 20);call #Ultimate.allocInit(30, 21);call #Ultimate.allocInit(9, 22);call #Ultimate.allocInit(25, 23);call #Ultimate.allocInit(13, 24);call #Ultimate.allocInit(7, 25);call write~init~int(44, 25, 0, 1);call write~init~int(77, 25, 1, 1);call write~init~int(101, 25, 2, 1);call write~init~int(116, 25, 3, 1);call write~init~int(104, 25, 4, 1);call write~init~int(58, 25, 5, 1);call write~init~int(0, 25, 6, 1);call #Ultimate.allocInit(5, 26);call write~init~int(67, 26, 0, 1);call write~init~int(82, 26, 1, 1);call write~init~int(73, 26, 2, 1);call write~init~int(84, 26, 3, 1);call write~init~int(0, 26, 4, 1);call #Ultimate.allocInit(3, 27);call write~init~int(79, 27, 0, 1);call write~init~int(75, 27, 1, 1);call write~init~int(0, 27, 2, 1);call #Ultimate.allocInit(2, 28);call write~init~int(41, 28, 0, 1);call write~init~int(0, 28, 1, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~switchedOnBeforeTS~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {38474#(<= ~waterLevel~0 1)} is VALID [2022-02-20 18:12:22,557 INFO L134 CoverageAnalysis]: Checked inductivity of 188 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 68 trivial. 0 not checked. [2022-02-20 18:12:22,557 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1898611019] provided 0 perfect and 2 imperfect interpolant sequences [2022-02-20 18:12:22,557 INFO L191 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-02-20 18:12:22,557 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 11] total 26 [2022-02-20 18:12:22,557 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325052547] [2022-02-20 18:12:22,557 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-02-20 18:12:22,558 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) Word has length 175 [2022-02-20 18:12:22,571 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-20 18:12:22,572 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2022-02-20 18:12:22,726 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 289 edges. 289 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:22,727 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-02-20 18:12:22,727 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-20 18:12:22,748 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-02-20 18:12:22,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-02-20 18:12:22,749 INFO L87 Difference]: Start difference. First operand 1008 states and 1163 transitions. Second operand has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2022-02-20 18:12:27,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,081 INFO L93 Difference]: Finished difference Result 2117 states and 2508 transitions. [2022-02-20 18:12:27,081 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-02-20 18:12:27,081 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) Word has length 175 [2022-02-20 18:12:27,082 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-20 18:12:27,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2022-02-20 18:12:27,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 338 transitions. [2022-02-20 18:12:27,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2022-02-20 18:12:27,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 338 transitions. [2022-02-20 18:12:27,088 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 31 states and 338 transitions. [2022-02-20 18:12:27,310 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-20 18:12:27,311 INFO L225 Difference]: With dead ends: 2117 [2022-02-20 18:12:27,311 INFO L226 Difference]: Without dead ends: 0 [2022-02-20 18:12:27,315 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 427 GetRequests, 374 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 510 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=557, Invalid=2095, Unknown=0, NotChecked=0, Total=2652 [2022-02-20 18:12:27,316 INFO L933 BasicCegarLoop]: 124 mSDtfsCounter, 727 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 1720 mSolverCounterSat, 315 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 730 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 2035 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 315 IncrementalHoareTripleChecker+Valid, 1720 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-02-20 18:12:27,316 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [730 Valid, 527 Invalid, 2035 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [315 Valid, 1720 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-02-20 18:12:27,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-02-20 18:12:27,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-02-20 18:12:27,317 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-20 18:12:27,317 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:27,317 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:27,317 INFO L87 Difference]: Start difference. First operand 0 states. Second operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:27,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,317 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:27,317 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:27,317 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,317 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,318 INFO L74 IsIncluded]: Start isIncluded. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:27,318 INFO L87 Difference]: Start difference. First operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand 0 states. [2022-02-20 18:12:27,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-20 18:12:27,318 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-02-20 18:12:27,318 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:27,318 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,318 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-20 18:12:27,318 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-20 18:12:27,318 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-20 18:12:27,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-20 18:12:27,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-02-20 18:12:27,319 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 175 [2022-02-20 18:12:27,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-20 18:12:27,319 INFO L470 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-02-20 18:12:27,320 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 8.307692307692308) internal successors, (216), 22 states have internal predecessors, (216), 9 states have call successors, (36), 10 states have call predecessors, (36), 10 states have return successors, (37), 8 states have call predecessors, (37), 9 states have call successors, (37) [2022-02-20 18:12:27,320 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-02-20 18:12:27,320 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-20 18:12:27,322 INFO L764 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-02-20 18:12:27,343 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-02-20 18:12:27,535 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-02-20 18:12:27,537 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-02-20 18:12:42,178 INFO L854 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 206 213) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 206 213) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 206 213) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 139 145) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L861 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 139 145) the Hoare annotation is: true [2022-02-20 18:12:42,179 INFO L854 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 915 926) the Hoare annotation is: (let ((.cse0 (not (< 1 ~waterLevel~0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse1 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse8 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse4 .cse6 .cse5 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse1 .cse3 (not (= 2 ~waterLevel~0)) .cse4 .cse6) (or .cse0 .cse2 .cse3 .cse4 .cse7 .cse5) (or .cse2 .cse3 .cse4 .cse7 .cse8) (or .cse3 .cse4 (not (<= 2 ~waterLevel~0)) .cse6 .cse7 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse8))) [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point L919-1(lines 915 926) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 915 926) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point L320(lines 320 324) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point cleanupEXIT(lines 306 335) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L861 garLoopResultBuilder]: At program point L320-1(lines 320 324) the Hoare annotation is: true [2022-02-20 18:12:42,179 INFO L858 garLoopResultBuilder]: For program point L317(line 317) no Hoare annotation was computed. [2022-02-20 18:12:42,179 INFO L861 garLoopResultBuilder]: At program point cleanupENTRY(lines 306 335) the Hoare annotation is: true [2022-02-20 18:12:42,179 INFO L861 garLoopResultBuilder]: At program point L316-2(lines 316 330) the Hoare annotation is: true [2022-02-20 18:12:42,179 INFO L861 garLoopResultBuilder]: At program point L312(line 312) the Hoare annotation is: true [2022-02-20 18:12:42,180 INFO L858 garLoopResultBuilder]: For program point L312-1(line 312) no Hoare annotation was computed. [2022-02-20 18:12:42,180 INFO L861 garLoopResultBuilder]: At program point L331(lines 306 335) the Hoare annotation is: true [2022-02-20 18:12:42,180 INFO L858 garLoopResultBuilder]: For program point L327(line 327) no Hoare annotation was computed. [2022-02-20 18:12:42,180 INFO L854 garLoopResultBuilder]: At program point L192(line 192) the Hoare annotation is: (let ((.cse9 (not (< 1 |old(~waterLevel~0)|))) (.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6 .cse1 .cse7) (or .cse5 .cse6 .cse1 .cse7 .cse8) (or .cse1 .cse2 .cse9 .cse3 .cse10) (or .cse1 .cse2 .cse9 .cse7 .cse10) (or .cse5 .cse6 .cse1 .cse3 .cse8) (or .cse0 .cse5 .cse6 .cse1 .cse3) (or .cse1 .cse2 .cse7 .cse10 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-02-20 18:12:42,180 INFO L854 garLoopResultBuilder]: At program point L192-1(lines 173 197) the Hoare annotation is: (let ((.cse8 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|)) (.cse25 (= 1 ~systemActive~0)) (.cse12 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse26 (<= 1 ~methaneLevelCritical~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse27 (<= ~waterLevel~0 1)) (.cse19 (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1))) (.cse28 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse20 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse21 (<= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse22 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse17 (and .cse18 .cse10 .cse27 .cse19 .cse28 .cse20 .cse21 .cse11 .cse22)) (.cse1 (and .cse9 .cse5)) (.cse16 (not (= |old(~waterLevel~0)| 1))) (.cse3 (not .cse26)) (.cse13 (and .cse8 .cse9 .cse26 .cse10 .cse27 .cse25 .cse28 .cse11 .cse12)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse24 (= ~waterLevel~0 1)) (.cse2 (not .cse25)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse23 (not (< 1 |old(~waterLevel~0)|))) (.cse15 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5) .cse6) (or .cse2 .cse7 (and .cse8 .cse9 .cse10 .cse5 .cse11 .cse12) .cse3 .cse13 .cse6 .cse14) (or .cse0 .cse1 .cse2 .cse15 .cse6 (and .cse4 (= 2 ~waterLevel~0) .cse5)) (or .cse2 .cse7 .cse3 .cse13 (not (= |old(~waterLevel~0)| 2))) (or .cse16 .cse2 .cse17 .cse7 .cse15 .cse14) (or .cse2 .cse17 .cse7 .cse15 (and .cse18 .cse10 .cse19 .cse20 .cse21 .cse5 .cse11 .cse22) .cse6 .cse14) (or .cse2 .cse7 .cse23 .cse3 .cse24 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse16 .cse2 .cse7 .cse3 .cse13 .cse14) (or (and .cse18 .cse10 .cse19 .cse20 .cse21 .cse24 .cse11 .cse22) .cse2 .cse7 .cse23 .cse15 .cse6) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,180 INFO L854 garLoopResultBuilder]: At program point L221(lines 214 224) the Hoare annotation is: (let ((.cse9 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse19 (<= 1 ~methaneLevelCritical~0)) (.cse21 (= 1 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 1)) (.cse22 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse12 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (= ~waterLevel~0 1)) (.cse10 (and .cse5 .cse6 .cse20 .cse22 .cse12 .cse8 .cse14)) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse17 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse21)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not .cse19)) (.cse18 (and (<= 1 ~pumpRunning~0) .cse5 .cse19 .cse6 .cse20 .cse21 .cse22 .cse8 .cse9)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9)) (or .cse0 .cse1 .cse10 .cse11 .cse4 (and .cse5 .cse6 .cse12 .cse13 .cse8 .cse14) .cse15) (or .cse16 .cse0 .cse11 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse16 .cse0 .cse11) (or .cse0 .cse1 .cse2 .cse11 (and .cse5 .cse6 .cse12 .cse7 .cse8 .cse14) .cse4) (or .cse17 .cse0 .cse1 .cse10 .cse11 .cse15) (or .cse16 .cse0 .cse3 .cse4) (or (and .cse5 .cse6 .cse13 .cse8 .cse9) .cse0 .cse1 .cse3 .cse4 .cse18 .cse15) (or .cse17 .cse0 .cse1 .cse3 .cse18 .cse15) (or .cse16 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,181 INFO L858 garLoopResultBuilder]: For program point L126-1(lines 126 132) no Hoare annotation was computed. [2022-02-20 18:12:42,181 INFO L858 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-02-20 18:12:42,181 INFO L854 garLoopResultBuilder]: At program point L490(lines 483 492) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= 1 ~systemActive~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse3 (and .cse13 (let ((.cse15 (<= 1 ~pumpRunning~0))) (or (and .cse15 .cse12 .cse11 (= ~waterLevel~0 1) .cse14) (and .cse15 .cse12 (<= 2 ~waterLevel~0) .cse11 .cse14))))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (and (= ~pumpRunning~0 0) .cse13)) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse9 (and .cse12 .cse13 .cse14)) (.cse0 (not .cse11)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 (not (= 0 ~systemActive~0))) (or .cse7 .cse5 .cse6 .cse0 .cse2) (or .cse5 .cse6 .cse0 .cse2 .cse4) (or .cse0 .cse1 .cse8 .cse3 .cse4) (or .cse7 .cse9 .cse0 .cse1 .cse8 .cse10) (or .cse5 .cse6 .cse0 .cse8 .cse4) (or .cse7 .cse5 .cse6 .cse0 .cse8) (or .cse7 .cse9 .cse0 .cse1 .cse2 .cse10)))) [2022-02-20 18:12:42,181 INFO L858 garLoopResultBuilder]: For program point timeShiftFINAL(lines 112 138) no Hoare annotation was computed. [2022-02-20 18:12:42,181 INFO L854 garLoopResultBuilder]: At program point L932(lines 927 935) the Hoare annotation is: (let ((.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse16 (<= 1 ~pumpRunning~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse22 (= ~methaneLevelCritical~0 0)) (.cse18 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse19 (<= ~waterLevel~0 1)) (.cse15 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse21 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse16 .cse17 .cse22 .cse18 .cse19 .cse15 .cse20 .cse21)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (and .cse17 .cse18 (= ~waterLevel~0 1) .cse21)) (.cse7 (not .cse22)) (.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse13 (and .cse17 .cse18 (= |old(~waterLevel~0)| ~waterLevel~0) .cse21)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (and .cse16 .cse17 .cse14 .cse18 .cse19 .cse15 .cse20 .cse21)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse15)) (.cse3 (not .cse14)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse10 .cse0 .cse7 (not (= |old(~waterLevel~0)| 2))) (or .cse6 .cse0 .cse1 .cse3 .cse11 .cse9) (or .cse12 .cse13 .cse0 .cse1 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse2 .cse7 .cse4 .cse5) (or .cse12 .cse10 .cse0 .cse7) (or .cse12 .cse13 .cse0 .cse1 .cse3 .cse11 .cse9) (or .cse10 .cse0 .cse3 .cse5) (or .cse10 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,181 INFO L858 garLoopResultBuilder]: For program point L895(lines 895 899) no Hoare annotation was computed. [2022-02-20 18:12:42,181 INFO L854 garLoopResultBuilder]: At program point L895-2(lines 891 902) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse13 (not (= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse14 (and (<= 1 ~pumpRunning~0) .cse8 .cse16 .cse18 .cse17 .cse19 .cse10)) (.cse15 (and .cse8 (= |old(~waterLevel~0)| ~waterLevel~0) .cse10)) (.cse4 (and .cse8 .cse18 .cse17 .cse19 .cse10)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (= ~waterLevel~0 1)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse17)) (.cse7 (not .cse16)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse6 .cse7 (and .cse8 .cse9 .cse10) .cse11) (or .cse12 .cse1 .cse3 .cse13) (or .cse1 .cse2 .cse3 .cse13 .cse4) (or .cse0 .cse1 .cse2 .cse14 .cse7 .cse5) (or .cse15 .cse1 .cse2 .cse14 .cse7 .cse11 .cse5) (or .cse15 .cse1 .cse2 .cse3 .cse4 .cse11 .cse5) (or .cse1 .cse2 .cse6 .cse3 .cse9 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse12 .cse1 .cse3) (or .cse12 .cse1 .cse7 .cse11) (or .cse12 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,181 INFO L858 garLoopResultBuilder]: For program point L119(lines 119 125) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L854 garLoopResultBuilder]: At program point L503(line 503) the Hoare annotation is: (let ((.cse23 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse24 (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1))) (.cse25 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse26 (<= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse27 (<= 0 |timeShift_isMethaneAlarm_#res#1|)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse4 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|)) (.cse5 (= ~pumpRunning~0 0)) (.cse32 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse20 (<= ~waterLevel~0 1)) (.cse30 (= 1 ~systemActive~0)) (.cse31 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse10 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse22 (not (= 0 ~systemActive~0))) (.cse8 (= ~waterLevel~0 1)) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse19 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse15 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse16 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (and .cse3 .cse4 .cse5 .cse32 .cse6 .cse20 .cse30 .cse31 .cse7 .cse9 .cse10)) (.cse11 (not .cse32)) (.cse29 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse30)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse21 (not (= ~methaneLevelCritical~0 0))) (.cse28 (and .cse23 .cse3 .cse6 .cse20 .cse30 .cse24 .cse31 .cse25 .cse26 .cse7 .cse9 .cse27)) (.cse18 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11 .cse12) (or .cse13 .cse14 .cse0 .cse1 .cse11 (and .cse4 .cse5 .cse15 .cse6 .cse16 .cse17 .cse9 .cse10) .cse18) (or .cse19 .cse0 (and .cse5 .cse15 .cse20 .cse16 .cse17) .cse11 .cse12) (or .cse19 .cse0 .cse21 (not (= |old(~waterLevel~0)| 2))) (or .cse19 (and .cse5 .cse17) .cse22) (or .cse19 .cse2 .cse12 .cse22) (or (and .cse23 .cse3 .cse6 .cse24 .cse25 .cse26 .cse7 .cse8 .cse9 .cse27) .cse0 .cse1 .cse2 .cse21 .cse12) (or .cse13 .cse19 .cse0 .cse21 (and .cse5 .cse15 .cse16 .cse17)) (or .cse13 .cse0 .cse1 (and .cse23 .cse15 .cse6 .cse24 .cse25 .cse26 .cse16 .cse17 .cse9 .cse27) .cse21 .cse28 .cse18) (or .cse29 .cse14 .cse0 .cse1 .cse11 .cse18) (or .cse29 .cse0 .cse1 .cse21 .cse28 .cse18)))) [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L503-1(line 503) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L119-2(lines 115 137) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L181(lines 181 189) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L177(lines 177 194) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L854 garLoopResultBuilder]: At program point L488(line 488) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse19 (< 1 ~waterLevel~0)) (.cse17 (= 1 ~systemActive~0)) (.cse20 (<= ~waterLevel~0 2))) (let ((.cse4 (and .cse14 .cse18 .cse15 .cse19 .cse17 .cse20)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (and (<= 1 ~pumpRunning~0) .cse14 .cse15 .cse19 .cse17 .cse20)) (.cse6 (and .cse18 .cse15 .cse16)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse17)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse14 .cse15 .cse16)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse1 .cse2) (or .cse6 .cse7 .cse0 .cse1 .cse8) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5) (or .cse1 .cse9 .cse10 .cse11 .cse2 .cse3) (or .cse1 .cse9 .cse10 .cse11 .cse8 .cse3) (or .cse6 .cse0 (not (= 0 ~systemActive~0))) (or .cse7 .cse1 .cse9 .cse2 .cse12 .cse13) (or .cse1 .cse9 .cse8 .cse3 .cse12 .cse13)))) [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L488-1(line 488) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L854 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1))) (.cse13 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse14 (<= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse15 (<= 1 ~switchedOnBeforeTS~0)) (.cse16 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse9 (and .cse10 .cse11 (<= ~waterLevel~0 1) .cse12 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse13 .cse14 .cse15 .cse16)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 (not (= |old(~waterLevel~0)| 2))) (or .cse1 .cse2 .cse7 .cse3 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse9 .cse2 .cse6 .cse4) (or .cse1 .cse9 .cse2 .cse6 (and .cse10 .cse11 .cse12 .cse13 .cse14 (= |old(~waterLevel~0)| ~waterLevel~0) .cse15 .cse16) .cse8 .cse4) (or .cse0 .cse5 .cse1 .cse6) (or .cse5 .cse1 .cse3 .cse8) (or (and .cse10 .cse11 .cse12 .cse13 .cse14 (= ~waterLevel~0 1) .cse15 .cse16) .cse1 .cse2 .cse7 .cse6 .cse8) (or .cse5 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,182 INFO L858 garLoopResultBuilder]: For program point L505(lines 505 515) no Hoare annotation was computed. [2022-02-20 18:12:42,182 INFO L854 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|)) (.cse17 (<= 1 ~methaneLevelCritical~0)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse16 (= 1 ~systemActive~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse12 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse2 (and (<= 1 ~pumpRunning~0) .cse8 .cse9 .cse17 .cse10 (<= ~waterLevel~0 1) .cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse11 .cse12)) (.cse14 (not (< 1 |old(~waterLevel~0)|))) (.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not .cse17)) (.cse0 (not .cse16)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse15 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or (and .cse8 .cse9 .cse10 (= |old(~waterLevel~0)| ~waterLevel~0) .cse11 .cse12) .cse13 .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse14 .cse6 .cse15) (or .cse0 .cse1 .cse14 .cse3 (= ~waterLevel~0 1) .cse15) (or .cse13 .cse5 .cse0 .cse6) (or .cse5 .cse0 .cse3 .cse15) (or .cse0 .cse1 .cse6 .cse15 .cse4) (or .cse5 (not (= 0 ~systemActive~0)))))) [2022-02-20 18:12:42,183 INFO L854 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 (not (= |old(~waterLevel~0)| 2))) (or .cse1 .cse2 .cse7 .cse3 .cse8) (or .cse1 .cse2 .cse7 .cse6 .cse8) (or .cse0 .cse5 .cse1 .cse6) (or .cse5 .cse1 .cse3 .cse8) (or .cse1 .cse2 .cse6 .cse8 .cse4) (or .cse5 (not (= 0 ~systemActive~0))))) [2022-02-20 18:12:42,183 INFO L858 garLoopResultBuilder]: For program point L501(lines 501 518) no Hoare annotation was computed. [2022-02-20 18:12:42,183 INFO L854 garLoopResultBuilder]: At program point L501-1(lines 493 521) the Hoare annotation is: (let ((.cse8 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|)) (.cse34 (<= 1 ~methaneLevelCritical~0)) (.cse14 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse32 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse33 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (.cse9 (= ~pumpRunning~0 0)) (.cse19 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse20 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| 2)) (.cse21 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse38 (<= 1 ~pumpRunning~0)) (.cse22 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse39 (= ~methaneLevelCritical~0 0)) (.cse10 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse36 (<= ~waterLevel~0 1)) (.cse35 (= 1 ~systemActive~0)) (.cse23 (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1))) (.cse37 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse24 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse25 (<= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse11 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~5#1| ~waterLevel~0)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse26 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse17 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (and .cse38 .cse22 .cse7 .cse39 .cse10 .cse36 .cse35 .cse23 .cse37 .cse24 .cse25 .cse11 .cse13 .cse26)) (.cse12 (= ~waterLevel~0 1)) (.cse6 (not (< 1 |old(~waterLevel~0)|))) (.cse28 (not (= 0 ~systemActive~0))) (.cse27 (not (= |old(~pumpRunning~0)| 0))) (.cse29 (and .cse22 .cse9 .cse19 .cse36 .cse20 .cse21)) (.cse30 (and .cse22 .cse9 (= 2 ~waterLevel~0) .cse32 .cse21 .cse33)) (.cse4 (not .cse39)) (.cse31 (and .cse38 .cse32 (<= 2 ~waterLevel~0) .cse35 .cse21 .cse33)) (.cse16 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~waterLevel~0)| 1))) (.cse18 (and .cse7 .cse8 .cse9 .cse34 .cse10 .cse36 .cse35 .cse37 .cse11 .cse13 .cse14)) (.cse1 (not .cse35)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not .cse34)) (.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse3 .cse6 (and .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse16) (or .cse17 .cse18 .cse1 .cse3 .cse15 (and .cse8 .cse9 .cse19 .cse10 .cse20 .cse21 .cse13 .cse14) .cse5) (or .cse17 .cse1 .cse2 .cse3 (and .cse22 .cse19 .cse10 .cse23 .cse24 .cse25 .cse20 .cse21 .cse13 .cse26) .cse4 .cse5) (or .cse27 (and .cse9 .cse21) .cse28) (or .cse27 .cse1 .cse29 .cse30 .cse15 .cse31 .cse16) (or (and .cse22 .cse7 .cse10 .cse23 .cse24 .cse25 .cse11 .cse12 .cse13 .cse26) .cse1 .cse3 .cse6 .cse4 .cse16) (or .cse27 .cse6 (and .cse32 .cse33) .cse16 .cse28) (or .cse27 .cse1 .cse29 .cse30 .cse4 .cse31 .cse16) (or .cse0 .cse18 .cse1 .cse3 .cse15 .cse5)))) [2022-02-20 18:12:42,183 INFO L854 garLoopResultBuilder]: At program point timeShiftENTRY(lines 112 138) the Hoare annotation is: (let ((.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (= ~pumpRunning~0 0)) (.cse15 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse19 (< 1 ~waterLevel~0)) (.cse17 (= 1 ~systemActive~0)) (.cse20 (<= ~waterLevel~0 2))) (let ((.cse4 (and .cse14 .cse18 .cse15 .cse19 .cse17 .cse20)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse11 (and (<= 1 ~pumpRunning~0) .cse14 .cse15 .cse19 .cse17 .cse20)) (.cse6 (and .cse18 .cse15 .cse16)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not .cse17)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse14 .cse15 .cse16)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse0 .cse1 .cse2) (or .cse6 .cse7 .cse0 .cse1 .cse8) (or .cse0 .cse1 .cse8 .cse3 .cse4 .cse5) (or .cse1 .cse9 .cse10 .cse11 .cse2 .cse3) (or .cse1 .cse9 .cse10 .cse11 .cse8 .cse3) (or .cse6 .cse0 (not (= 0 ~systemActive~0))) (or .cse7 .cse1 .cse9 .cse2 .cse12 .cse13) (or .cse1 .cse9 .cse8 .cse3 .cse12 .cse13)))) [2022-02-20 18:12:42,183 INFO L858 garLoopResultBuilder]: For program point timeShiftEXIT(lines 112 138) no Hoare annotation was computed. [2022-02-20 18:12:42,183 INFO L858 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L964(lines 959 967) the Hoare annotation is: (let ((.cse8 (<= ~methaneLevelCritical~0 |timeShift_processEnvironment_~tmp~1#1|)) (.cse4 (= ~pumpRunning~0 0)) (.cse12 (<= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse31 (<= 1 ~methaneLevelCritical~0)) (.cse20 (<= 1 ~pumpRunning~0)) (.cse23 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse34 (= ~methaneLevelCritical~0 0)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse32 (= 1 ~systemActive~0)) (.cse24 (< 0 (+ |timeShift_processEnvironment_~tmp~1#1| 1))) (.cse33 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse25 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse26 (<= |timeShift_processEnvironment_~tmp~1#1| 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0)) (.cse27 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (let ((.cse21 (not (= 0 ~systemActive~0))) (.cse14 (not (< 1 |old(~waterLevel~0)|))) (.cse10 (= ~waterLevel~0 1)) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse5 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse22 (and .cse20 .cse23 .cse7 .cse34 .cse9 .cse17 .cse32 .cse24 .cse33 .cse25 .cse26 .cse11 .cse27)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse34)) (.cse19 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (not (<= |old(~waterLevel~0)| 2))) (.cse30 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not .cse32)) (.cse13 (not (<= 1 |old(~pumpRunning~0)|))) (.cse15 (not .cse31)) (.cse29 (and .cse7 .cse8 .cse4 .cse31 .cse9 .cse17 .cse32 .cse33 .cse11 .cse12)) (.cse28 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6)) (or (and .cse7 .cse8 .cse4 .cse9 .cse10 .cse11 .cse12) .cse2 .cse13 .cse14 .cse15 .cse16) (let ((.cse18 (= 2 ~waterLevel~0))) (or .cse1 .cse2 .cse15 (and .cse4 .cse5 .cse17 .cse6) (and .cse4 .cse18 .cse19 .cse6) .cse16 (and .cse20 .cse18 .cse19 .cse6))) (or .cse1 (and .cse4 .cse6) .cse21) (or .cse1 .cse19 .cse14 .cse16 .cse21) (or .cse0 .cse2 .cse13 .cse3 .cse22 (and .cse23 .cse5 .cse9 .cse24 .cse25 .cse26 .cse6 .cse11 .cse27) .cse28) (or .cse2 .cse13 .cse14 .cse3 .cse16 (and .cse23 .cse7 .cse9 .cse24 .cse25 .cse26 .cse10 .cse11 .cse27)) (or .cse0 (and .cse8 .cse4 .cse5 .cse9 .cse6 .cse11 .cse12) .cse2 .cse13 .cse15 .cse29 .cse28) (or .cse30 .cse2 .cse13 .cse3 .cse22 .cse28) (or (and .cse4 .cse19 .cse6) .cse1 .cse2 .cse3 (and .cse20 .cse19 .cse6) .cse16 (not (<= 2 |old(~waterLevel~0)|))) (or .cse30 .cse2 .cse13 .cse15 .cse29 .cse28)))) [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point L436(lines 436 442) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point L436-1(lines 436 442) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L366(lines 362 368) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L461(lines 416 463) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse4) (and .cse0 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse7 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse5 .cse2 .cse7 .cse3 .cse4))) [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L428(line 428) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse3 .cse4) (and .cse0 .cse6 .cse1 .cse3 .cse4) (and .cse5 .cse4 (= 0 ~systemActive~0)) (and .cse5 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse7 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse5 .cse2 .cse7 .cse3 .cse4))) [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-02-20 18:12:42,184 INFO L861 garLoopResultBuilder]: At program point L379(lines 371 381) the Hoare annotation is: true [2022-02-20 18:12:42,184 INFO L854 garLoopResultBuilder]: At program point L301(lines 289 303) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-02-20 18:12:42,184 INFO L858 garLoopResultBuilder]: For program point L392(lines 392 399) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L392-2(lines 392 399) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L293(lines 293 299) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L293-1(lines 293 299) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L417(lines 416 463) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L446(lines 446 459) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L854 garLoopResultBuilder]: At program point L438(line 438) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (< 1 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse4 (= 0 ~systemActive~0)) (and .cse6 (= 2 ~waterLevel~0) .cse7 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0)) (and .cse6 .cse7 .cse8 .cse3 .cse4))) [2022-02-20 18:12:42,185 INFO L861 garLoopResultBuilder]: At program point L467(lines 406 471) the Hoare annotation is: true [2022-02-20 18:12:42,185 INFO L861 garLoopResultBuilder]: At program point L401(lines 382 404) the Hoare annotation is: true [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L426(lines 426 432) no Hoare annotation was computed. [2022-02-20 18:12:42,185 INFO L858 garLoopResultBuilder]: For program point L426-1(lines 426 432) no Hoare annotation was computed. [2022-02-20 18:12:42,186 INFO L858 garLoopResultBuilder]: For program point L418(lines 418 422) no Hoare annotation was computed. [2022-02-20 18:12:42,186 INFO L854 garLoopResultBuilder]: At program point L480(lines 475 482) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:42,186 INFO L854 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:42,186 INFO L854 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-02-20 18:12:42,187 INFO L854 garLoopResultBuilder]: At program point L464(lines 415 465) the Hoare annotation is: false [2022-02-20 18:12:42,187 INFO L854 garLoopResultBuilder]: At program point L295(line 295) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-02-20 18:12:42,187 INFO L858 garLoopResultBuilder]: For program point L452(lines 452 458) no Hoare annotation was computed. [2022-02-20 18:12:42,187 INFO L854 garLoopResultBuilder]: At program point L452-2(lines 446 459) the Hoare annotation is: (let ((.cse2 (< 1 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse4 (= 0 ~systemActive~0)) (and .cse6 (= 2 ~waterLevel~0) .cse7 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse7 .cse8 .cse3 .cse4))) [2022-02-20 18:12:42,187 INFO L854 garLoopResultBuilder]: At program point L161(line 161) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:42,188 INFO L854 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 147 171) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse7 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7 .cse5) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse6 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:42,188 INFO L854 garLoopResultBuilder]: At program point L285(lines 270 288) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0)) .cse5 .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse6) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 (and .cse5 (= 2 ~waterLevel~0)) (not (<= 1 ~methaneLevelCritical~0)) .cse6 .cse4)))) [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L155(lines 155 163) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L151(lines 151 168) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L279(lines 279 283) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L279-2(lines 279 283) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L854 garLoopResultBuilder]: At program point L977(lines 968 981) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse7 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse2 .cse6 .cse4 .cse7) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 .cse7 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse2 .cse6 .cse8 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse8 .cse5)))) [2022-02-20 18:12:42,188 INFO L854 garLoopResultBuilder]: At program point L203(lines 198 205) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse4 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 .cse1 .cse2 .cse4 .cse3))) [2022-02-20 18:12:42,188 INFO L854 garLoopResultBuilder]: At program point L166(line 166) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L166-1(lines 147 171) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 147 171) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point L972(lines 972 978) no Hoare annotation was computed. [2022-02-20 18:12:42,188 INFO L858 garLoopResultBuilder]: For program point waterRiseEXIT(lines 903 914) no Hoare annotation was computed. [2022-02-20 18:12:42,189 INFO L858 garLoopResultBuilder]: For program point L907-1(lines 903 914) no Hoare annotation was computed. [2022-02-20 18:12:42,189 INFO L854 garLoopResultBuilder]: At program point waterRiseENTRY(lines 903 914) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or .cse0 .cse4 .cse2 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse0 .cse1 .cse3 .cse5) (or .cse6 .cse3 (not (= 0 ~systemActive~0))) (or .cse6 .cse0 .cse4 .cse3 .cse5) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-02-20 18:12:42,189 INFO L858 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 225 233) no Hoare annotation was computed. [2022-02-20 18:12:42,189 INFO L861 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 225 233) the Hoare annotation is: true [2022-02-20 18:12:42,189 INFO L858 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 225 233) no Hoare annotation was computed. [2022-02-20 18:12:42,191 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-20 18:12:42,192 INFO L180 ceAbstractionStarter]: Computing trace abstraction results [2022-02-20 18:12:42,197 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:12:42,197 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:42,197 WARN L170 areAnnotationChecker]: L919-1 has no Hoare annotation [2022-02-20 18:12:42,197 WARN L170 areAnnotationChecker]: L919-1 has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: deactivatePumpFINAL has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__baseEXIT has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: L919-1 has no Hoare annotation [2022-02-20 18:12:42,201 WARN L170 areAnnotationChecker]: L312-1 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L488-1 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L151 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L907-1 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: isPumpRunningFINAL has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: deactivatePumpEXIT has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: changeMethaneLevelEXIT has no Hoare annotation [2022-02-20 18:12:42,202 WARN L170 areAnnotationChecker]: L312-1 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L488-1 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: waterRiseEXIT has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: isPumpRunningEXIT has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L126-1 has no Hoare annotation [2022-02-20 18:12:42,203 WARN L170 areAnnotationChecker]: L293-1 has no Hoare annotation [2022-02-20 18:12:42,204 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:42,204 WARN L170 areAnnotationChecker]: processEnvironment__wrappee__highWaterSensorEXIT has no Hoare annotation [2022-02-20 18:12:42,204 WARN L170 areAnnotationChecker]: L436-1 has no Hoare annotation [2022-02-20 18:12:42,204 WARN L170 areAnnotationChecker]: L317 has no Hoare annotation [2022-02-20 18:12:42,204 WARN L170 areAnnotationChecker]: L119 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L279 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L426-1 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L503-1 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L126-1 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L446 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L446 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L317 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L119 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L119 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L279 has no Hoare annotation [2022-02-20 18:12:42,205 WARN L170 areAnnotationChecker]: L279 has no Hoare annotation [2022-02-20 18:12:42,206 WARN L170 areAnnotationChecker]: L436 has no Hoare annotation [2022-02-20 18:12:42,206 WARN L170 areAnnotationChecker]: L436 has no Hoare annotation [2022-02-20 18:12:42,206 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-02-20 18:12:42,206 WARN L170 areAnnotationChecker]: L505 has no Hoare annotation [2022-02-20 18:12:42,206 WARN L170 areAnnotationChecker]: L501 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: cleanupEXIT has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L320 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L320 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L895 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L895 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L119-2 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L119-2 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L279-2 has no Hoare annotation [2022-02-20 18:12:42,207 WARN L170 areAnnotationChecker]: L436-1 has no Hoare annotation [2022-02-20 18:12:42,209 WARN L170 areAnnotationChecker]: L506 has no Hoare annotation [2022-02-20 18:12:42,209 WARN L170 areAnnotationChecker]: L506 has no Hoare annotation [2022-02-20 18:12:42,209 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:42,209 WARN L170 areAnnotationChecker]: L501 has no Hoare annotation [2022-02-20 18:12:42,209 WARN L170 areAnnotationChecker]: L501 has no Hoare annotation [2022-02-20 18:12:42,216 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2022-02-20 18:12:42,216 WARN L170 areAnnotationChecker]: L293 has no Hoare annotation [2022-02-20 18:12:42,217 WARN L170 areAnnotationChecker]: L293 has no Hoare annotation [2022-02-20 18:12:42,217 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2022-02-20 18:12:42,218 WARN L170 areAnnotationChecker]: L119-2 has no Hoare annotation [2022-02-20 18:12:42,218 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-02-20 18:12:42,218 WARN L170 areAnnotationChecker]: L177 has no Hoare annotation [2022-02-20 18:12:42,218 WARN L170 areAnnotationChecker]: L392-2 has no Hoare annotation [2022-02-20 18:12:42,218 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: timeShiftFINAL has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L503-1 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2022-02-20 18:12:42,219 WARN L170 areAnnotationChecker]: L293-1 has no Hoare annotation [2022-02-20 18:12:42,220 WARN L170 areAnnotationChecker]: L392-2 has no Hoare annotation [2022-02-20 18:12:42,220 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2022-02-20 18:12:42,226 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:42,226 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2022-02-20 18:12:42,226 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2022-02-20 18:12:42,229 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: timeShiftEXIT has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L418 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L181 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L426 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L426 has no Hoare annotation [2022-02-20 18:12:42,230 WARN L170 areAnnotationChecker]: L181 has no Hoare annotation [2022-02-20 18:12:42,231 WARN L170 areAnnotationChecker]: L181 has no Hoare annotation [2022-02-20 18:12:42,231 WARN L170 areAnnotationChecker]: L426-1 has no Hoare annotation [2022-02-20 18:12:42,234 INFO L163 areAnnotationChecker]: CFG has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2022-02-20 18:12:42,285 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.02 06:12:42 BoogieIcfgContainer [2022-02-20 18:12:42,285 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-02-20 18:12:42,285 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-02-20 18:12:42,285 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-02-20 18:12:42,286 INFO L275 PluginConnector]: Witness Printer initialized [2022-02-20 18:12:42,286 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.02 06:11:58" (3/4) ... [2022-02-20 18:12:42,288 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-02-20 18:12:42,292 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-02-20 18:12:42,292 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-02-20 18:12:42,292 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-02-20 18:12:42,292 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-02-20 18:12:42,292 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-02-20 18:12:42,293 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-02-20 18:12:42,293 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-02-20 18:12:42,293 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-02-20 18:12:42,299 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-02-20 18:12:42,300 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-02-20 18:12:42,300 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-02-20 18:12:42,300 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-02-20 18:12:42,301 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-02-20 18:12:42,301 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:42,301 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-02-20 18:12:42,320 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:42,321 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:12:42,321 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && \result == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || (((((((((pumpRunning == \old(pumpRunning) && \result < 2) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && tmp < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && waterLevel <= 1) && tmp < 2) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && waterLevel <= 1) && tmp < 2) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || ((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:42,322 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:12:42,322 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:12:42,322 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) && (((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((pumpRunning == \old(pumpRunning) && \result < 2) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) [2022-02-20 18:12:42,322 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:12:42,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-02-20 18:12:42,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) [2022-02-20 18:12:42,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) [2022-02-20 18:12:42,323 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) [2022-02-20 18:12:42,347 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2022-02-20 18:12:42,347 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-02-20 18:12:42,348 INFO L158 Benchmark]: Toolchain (without parser) took 44543.64ms. Allocated memory was 148.9MB in the beginning and 415.2MB in the end (delta: 266.3MB). Free memory was 110.1MB in the beginning and 280.7MB in the end (delta: -170.6MB). Peak memory consumption was 94.3MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,348 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 148.9MB. Free memory was 120.1MB in the beginning and 120.0MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-02-20 18:12:42,349 INFO L158 Benchmark]: CACSL2BoogieTranslator took 422.94ms. Allocated memory is still 148.9MB. Free memory was 110.1MB in the beginning and 109.9MB in the end (delta: 238.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,349 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.52ms. Allocated memory is still 148.9MB. Free memory was 109.9MB in the beginning and 106.5MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,349 INFO L158 Benchmark]: Boogie Preprocessor took 34.77ms. Allocated memory is still 148.9MB. Free memory was 106.5MB in the beginning and 105.2MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,350 INFO L158 Benchmark]: RCFGBuilder took 582.39ms. Allocated memory is still 148.9MB. Free memory was 105.2MB in the beginning and 84.2MB in the end (delta: 21.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,350 INFO L158 Benchmark]: TraceAbstraction took 43367.18ms. Allocated memory was 148.9MB in the beginning and 415.2MB in the end (delta: 266.3MB). Free memory was 83.4MB in the beginning and 286.0MB in the end (delta: -202.6MB). Peak memory consumption was 216.6MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,350 INFO L158 Benchmark]: Witness Printer took 61.95ms. Allocated memory is still 415.2MB. Free memory was 286.0MB in the beginning and 280.7MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-02-20 18:12:42,351 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 148.9MB. Free memory was 120.1MB in the beginning and 120.0MB in the end (delta: 28.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 422.94ms. Allocated memory is still 148.9MB. Free memory was 110.1MB in the beginning and 109.9MB in the end (delta: 238.6kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.52ms. Allocated memory is still 148.9MB. Free memory was 109.9MB in the beginning and 106.5MB in the end (delta: 3.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.77ms. Allocated memory is still 148.9MB. Free memory was 106.5MB in the beginning and 105.2MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 582.39ms. Allocated memory is still 148.9MB. Free memory was 105.2MB in the beginning and 84.2MB in the end (delta: 21.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 43367.18ms. Allocated memory was 148.9MB in the beginning and 415.2MB in the end (delta: 266.3MB). Free memory was 83.4MB in the beginning and 286.0MB in the end (delta: -202.6MB). Peak memory consumption was 216.6MB. Max. memory is 16.1GB. * Witness Printer took 61.95ms. Allocated memory is still 415.2MB. Free memory was 286.0MB in the beginning and 280.7MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 97 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 43.2s, OverallIterations: 13, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 19.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.6s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3159 SdHoareTripleChecker+Valid, 4.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3108 mSDsluCounter, 6233 SdHoareTripleChecker+Invalid, 4.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4405 mSDsCounter, 1124 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4717 IncrementalHoareTripleChecker+Invalid, 5841 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1124 mSolverCounterUnsat, 1828 mSDtfsCounter, 4717 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1109 GetRequests, 891 SyntacticMatches, 7 SemanticMatches, 211 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1479 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1101occurred in iteration=11, InterpolantAutomatonStates: 176, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 431 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 3262 PreInvPairs, 3716 NumberOfFragments, 6440 HoareAnnotationTreeSize, 3262 FomulaSimplifications, 8126 FormulaSimplificationTreeSizeReduction, 4.6s HoareSimplificationTime, 45 FomulaSimplificationsInter, 47489 FormulaSimplificationTreeSizeReductionInter, 9.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 4.6s InterpolantComputationTime, 1483 NumberOfCodeBlocks, 1483 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1734 ConstructedInterpolants, 0 QuantifiedInterpolants, 3513 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1815 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 1170/1266 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((((((((((1 <= pumpRunning && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || ((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive)) || ((((pumpRunning == 0 && 2 == waterLevel) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && \result == methaneLevelCritical) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(waterLevel) <= 1) || ((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && tmp < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || (((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || (((((((((pumpRunning == \old(pumpRunning) && \result < 2) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && tmp < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && waterLevel <= 1) && tmp < 2) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && ((((((((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 < \old(waterLevel))) || (2 == \result && tmp == 2)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result < 2) && waterLevel <= 1) && tmp < 2) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(methaneLevelCritical == 0)) || (((((1 <= pumpRunning && 2 == \result) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || ((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((((!(\old(waterLevel) <= 1) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 415]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) - InvariantResult [Line: 198]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) - InvariantResult [Line: 959]: Loop Invariant Derived loop invariant: (((((((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel)) && (((((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result < 2) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || (((pumpRunning == 0 && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || (((1 <= pumpRunning && 2 == waterLevel) && 2 == \result) && \old(waterLevel) == waterLevel))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || 2 == \result) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || ((((((((pumpRunning == \old(pumpRunning) && \result < 2) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result))) && ((((((!(\old(waterLevel) <= 1) || ((((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result < 2) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && \result <= waterLevel) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((((((\result <= waterLevel && methaneLevelCritical <= tmp) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 382]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 316]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 362]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: (((((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || (((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \result <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: (((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2)) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (\old(waterLevel) == waterLevel && (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 == systemActive) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= switchedOnBeforeTS)))) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 891]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) == 2)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && 1 <= methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: ((((((((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((((methaneLevelCritical <= tmp && pumpRunning == 0) && \result == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(\old(waterLevel) == 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || ((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((!(1 == systemActive) || ((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && waterLevel + 1 <= \old(waterLevel)) && \result <= 0) && tmp <= 0) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || (((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && 0 <= \result)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(1 <= methaneLevelCritical)) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((((((methaneLevelCritical <= tmp && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == methaneLevelCritical) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && methaneLevelCritical <= \result)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && 0 < tmp + 1) && \result <= 0) && tmp <= 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && 0 <= \result) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 306]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && 2 == waterLevel)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && !(tmp == 0)) && pumpRunning == 0) && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) RESULT: Ultimate proved your program to be correct! [2022-02-20 18:12:42,406 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE